Hi, On Mon, Jun 04, 2001 at 09:49:05AM -0500, Luis Javier Perez wrote: > I'm actually doing a pt, and i'm facing a trouble, the scenario has a web > server with w2k and iis 5.0, now i have put netcat listening on port 99 and > i can browse files and stuff like that but i need to scale privileges, i > tried hk but it fails.. is there something like hk for win2k??? elevation of previleges on Windows 2000: - MS00-053 (Service Control Manager Named Pipe Impersonation) exploitcode (adds the current user to the local administrator group) is available (pipeupadmin) - MS01-007 (Network DDE Agent Request ...) proof of concept code available (http://www.atstake.com) - Gunsiki #45 (Elevation of privileges with debug registers on Win2K) proof of concept code (http://www.guninski.com/dr07.html) ... ciao, Tom Fischer
This archive was generated by hypermail 2b30 : Tue Jun 05 2001 - 09:08:26 PDT