Focus on Microsoft
Windows NT Desktop Nov 22 2007 01:31PM
sisram2 gmail com (2 replies)
RE: Windows NT Desktop Nov 22 2007 05:46PM
Thor (Hammer of God) (thor hammerofgod com)
You've got to be WAY more specific. Do you really mean NT? As in
"NT?" What do you mean "Registry and BIOS are disabled?" Exactly how
have they disabled the USB, CD and floppy? When you say "the other
option is to access other domains thru this one," what does that mean?

And what is your goal- just to get local admin? If all the processing
is "online and nothing is stored locally" what difference does it make
if you get admin and enable USB? There are a million ways to "get
admin" on an NT box, or any box for that matter if you're sitting in
front of it.

There are many people on this list who can help, but if you want to get
any value out of a post, you've got to be clear about what you want.
All that being said, the first thing I would suggest is to hire a
professional pen-tester unless you are just doing this for fun.


> -----Original Message-----
> From: listbounce (at) securityfocus (dot) com [email concealed]
> [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On Behalf Of sisram2 (at) gmail (dot) com [email concealed]
> Sent: Thursday, November 22, 2007 5:32 AM
> To: focus-ms (at) securityfocus (dot) com [email concealed]
> Subject: Windows NT Desktop
> Hi All,
> I was wandering if anyone could help me with the following
> Background
> There are couple of PC's (Windows NT) which are part of a domain (say
> XYZ). For the users of this domain the USB, CD drive etc. are
> The commond prompt , RUN option, Regestiry and BIOS is also disabled.
> Also the admin has done the hardening at desktop level and not at
> domain level
> The PC's have access to an application on remote server via html
> All the processing is done online and nothing is stored locally
> Objective and ethical test that needs to be done
> I want to get local admin rights or somehow change the privilge levels
> to enable USB or Floppy drive. The other option is if I could access
> other domains thru this one.
> It would be nice if someone could suggest a methodology or approach

[ reply ]
RE: Windows NT Desktop Nov 22 2007 05:08PM
James D. Stallard (james leafgrove com)


Privacy Statement
Copyright 2010, SecurityFocus