Re: IIS & w2k

From: Tom Fischer (Tom.Fischerat_private-stuttgart.de)
Date: Mon Jun 04 2001 - 12:54:56 PDT

  • Next message: Parth Galen: "L0phtCrack 3.0"

    Hi,
    
    On Mon, Jun 04, 2001 at 09:49:05AM -0500, Luis Javier Perez wrote:
    > I'm actually doing a pt, and i'm facing a trouble, the scenario has a web
    > server with w2k and iis 5.0, now i have put netcat listening on port 99 and
    > i can browse files and stuff like that but i need to scale privileges, i
    > tried hk but it fails.. is there something like hk for win2k???
    elevation of previleges on Windows 2000:
    - MS00-053 (Service Control Manager Named Pipe Impersonation)
      exploitcode (adds the current user to the local administrator group)
      is available (pipeupadmin)
    - MS01-007 (Network DDE Agent Request ...)
      proof of concept code available (http://www.atstake.com)
    - Gunsiki #45 (Elevation of privileges with debug registers on Win2K)
      proof of concept code (http://www.guninski.com/dr07.html)
    ...
    
    ciao,
    Tom Fischer
    



    This archive was generated by hypermail 2b30 : Tue Jun 05 2001 - 09:08:26 PDT