armadaender Posted August 1, 2006 Posted August 1, 2006 Stumbled across this today on digg and I was curious as to your guys' thoughts on it. http://www.projectstreamer.com/users/r0t0r...p_priv_esc.html *It's a short vid. Quote
debianuser Posted August 1, 2006 Posted August 1, 2006 Stumbled across this today on digg and I was curious as to your guys' thoughts on it.http://www.projectstreamer.com/users/r0t0r...p_priv_esc.html *It's a short vid. did not try it to see if it works... but if it does.. then that's scary... a solution would be to disable dos prompt for all users beside the Admin :roll: Quote
cooper Posted August 1, 2006 Posted August 1, 2006 Wouldn't the better solution be to just not run the scheduler? Or perhaps limit the users who can set up a scheduled task? Quote
debianuser Posted August 1, 2006 Posted August 1, 2006 Wouldn't the better solution be to just not run the scheduler?Or perhaps limit the users who can set up a scheduled task? It does not work with a limited user.. you need to be Admin to execute it! so no worries - Quote
Sparda Posted August 1, 2006 Posted August 1, 2006 did not try it to see if it works... but if it does.. then that's scary...a solution would be to disable dos prompt for all users beside the Admin :roll: Actualy, that wouldn't solve the problem. When cmd is launched via task sceduler it is launched as system. System is the non-user interactive root (where as the administrator acount is the user interactive root). Even if command prompt is blocked and stops a user having to manualy type in the at command, the user can just as easily write it into a batch script. Failing that, write a program that gets the current time, adds a minuet to it, then executes the at command for the user. Quote
debianuser Posted August 1, 2006 Posted August 1, 2006 did not try it to see if it works... but if it does.. then that's scary...a solution would be to disable dos prompt for all users beside the Admin :roll: Actualy, that wouldn't solve the problem. When cmd is launched via task sceduler it is launched as system. System is the non-user interactive root (where as the administrator acount is the user interactive root). Even if command prompt is blocked and stops a user having to manualy type in the at command, the user can just as easily write it into a batch script. Failing that, write a program that gets the current time, adds a minuet to it, then executes the at command for the user. ok i see... well anyway... you gotta be Admin to execute it, or am I mistaken? Quote
Sparda Posted August 1, 2006 Posted August 1, 2006 I just tested it on windows 2000 and it doesn't seem to work. Limited users are not allowed to create scedualed tasks. Quote
roo-boy Posted August 1, 2006 Posted August 1, 2006 yeah same issue, i could not even set the scheduler thru dos prompt. whats the date of this video? it seems like something before service pack 2 or even before SP1. Quote
kickarse Posted August 1, 2006 Posted August 1, 2006 It's pre sp2... we already have a thread about it... Quote
Freakish Posted August 2, 2006 Posted August 2, 2006 you could just create a administrator account and then delete the other adminstrator. Quote
Guest zacharygriggs Posted August 2, 2006 Posted August 2, 2006 taken not more than 5 minutes ago it works right click and view image fore a blow up Quote
debianuser Posted August 2, 2006 Posted August 2, 2006 taken not more than 5 minutes ago it works right click and view image fore a blow up yes Duh - it works but no from limited user! - end of the thread - Quote
Guest zacharygriggs Posted August 2, 2006 Posted August 2, 2006 i had problems the creation of accounts is and i quote "null" so the system cannot create accounts, brings slight peace of mind after reading 1984 and i'll try it from limited account Quote
Guest zacharygriggs Posted August 2, 2006 Posted August 2, 2006 "Access Denied" but i must try things with the account Quote
debianuser Posted August 2, 2006 Posted August 2, 2006 "Access Denied"but i must try things with the account dude... no offense but do you read the other posts before writting? :? Quote
Freakish Posted August 2, 2006 Posted August 2, 2006 If you have access to the command prompt then you can just get administrated status in under 10 seconds. I'm not going to post how for two reasons 1. Most of the people on here probably already know how to do it. 2. For the people in school that don't know how to do it, I can't trust them to use it with in reason. Quote
melodic Posted August 2, 2006 Posted August 2, 2006 If you have access to the command prompt then you can just get administrated status in under 10 seconds.I'm not going to post how for two reasons 1. Most of the people on here probably already know how to do it. 2. For the people in school that don't know how to do it, I can't trust them to use it with in reason. post then. i dont know and ive left school... Quote
cooper Posted August 2, 2006 Posted August 2, 2006 And thankfully you're the last person on this forum that was still in school. Yup, all clear. Go for it. :roll: Quote
melodic Posted August 2, 2006 Posted August 2, 2006 phew was close there eh cooper :P yeah i left months ago so its good to tell:P Quote
kickarse Posted August 2, 2006 Posted August 2, 2006 No school age kids? whoa... that's a first... Quote
Freakish Posted August 2, 2006 Posted August 2, 2006 I'm still in high school. I'm going into 11th grade after summer break. I just hope I got into the Cisco class. Quote
Guest zacharygriggs Posted August 3, 2006 Posted August 3, 2006 I'm still in high school. I'm going into 11th grade after summer break. I just hope I got into the Cisco class. shut up, now he wont tell us anyway most schools disable command prompt Quote
Guest zacharygriggs Posted August 3, 2006 Posted August 3, 2006 seriously freakish how do you gain admin powers Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.