News for hackers. Stuff that matters.

A comment on When Employees Use Software That IT Hasn’t Approved. Parent comment

Re:When Employees Use Software That IT Hasn’t Approved by user5994461 on Wednesday June 12, 2019 @05:45PM (#20169662)
Nonsense, there are endless ways to escalate and pivot once you get local admin.

That being said, there are indeed restrictions that can and should be set on admin rights. Not that IT would know about it or that it would limit pivoting much.

[ Parent | on HN ]
Re:When Employees Use Software That IT Hasn’t Approved by ClassyJacket on Wednesday June 12, 2019 @10:09PM (#20171278)
"Nonsense, there are endless ways to escalate and pivot once you get local admin."

Why not report your findings to Microsoft and get your bug bounty payout?

And if this is true, wouldn't they also just do that from inside the VM?

[ Parent | on HN ]