News for hackers. Stuff that matters.

A comment on Remote Kernel Code Execution Via HTTP Request In IIS On Windows. Parent comment

Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by maxerickson on Wednesday April 15, 2015 @11:10AM (#9381447)
This page makes it sound easy to go from the one to the other:

http://blogs.technet.com/b/askds/archive/2008/10/22/getting-...

(not as easy as earlier versions, but still)

[ Parent | on HN ]
Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by thefreeman on Wednesday April 15, 2015 @02:37PM (#9383120)
that is from 7 years ago...
[ Parent | on HN ]
Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by maxerickson on Wednesday April 15, 2015 @02:57PM (#9383276)
Sure. I read est as saying that Administrators are more restricted in Server 2008 than they were in earlier Windows versions. I assumed they were talking about the relatively well known technique of scheduling a cmd shell to run as SYSTEM, which that blog mentions being prevented in Server 2008.

But you would still expect an Administrator account to be able to load files onto the system, so obtaining the SYSTEM shell remains pretty easy.

The distinction between SYSTEM and Administrator was a convenience, and if I understood est correctly, it still is.

[ Parent | on HN ]