|
       
 |
|
| Programming tutorials All Knowledge Info and links to posted here |
  |
|
Running A Desktop With Full System Privileges
|
LinkBack | Thread Tools | Display Modes |
23-Feb-2007, 07:18 AM
|
#1 (permalink) |
|
Fixed Error!
Posts: 330
Join Date: Feb 2007
Rep Power: 2
IM:
|
Running A Desktop With Full System Privileges
A tutorial on how to trick Windows XP into giving you system privs. [0.0] Table of Contents =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= [1.0] …………………. Abstract -[1.1] ………………… Why hackers should care [2.0] …………………. Introduction to Local System -[2.1] ………………… Getting SYSTEM -[2.2] ………………… What to do now -[2.3] ………………… Abnormalities & experimentation -[2.4] ………………… A quick fix [3.0] …………………. Ending notes -[3.1] ………………… Questions/Comments/Contact -[3.2] ………………… Shoutz & Flamez -[3.3] ………………… Copyright information =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= [1.0] Abstract =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Using simple command line tools on a machine running Windows XP we will obtain system level privileges, and run the entire explorer process (Desktop), and all processes that run from it have system privileges. The system run level is higher than administrator, and has full control of the operating system and it’s kernel. On many machines this can be exploited even with the guest account. At the time I’m publishing this, I have been unable to find any other mention of people running an entire desktop as system, although I have seen some articles regarding the SYSTEM command prompt. -[1.1] Why hackers should care Local privilege escalation is useful on any system that a hacker may compromise; the system account allows for several other things that aren’t normally possible (like resetting the administrator password). =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= [2.0] Introduction to Local System =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= The Local System account is used by the Windows OS to control various aspects of the system (kernel, services, etc); the account shows up as SYSTEM in the Task Manager process list, as seen in the following screen shot:  |
|
        
|
|
|
|
| |
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | |
| Display Modes | |
|
|
Linear Mode
