hi all ,
i am trying a unicode exploitation technique on a win2k server .I am able to exploit the server through unicode and i binded a remote shell using nc. i m trying to run pwdump2.exe to extract the password hashes, where i m getting an error "access denied" ( the reason is when i do a unicode attack i will get only IUSER_X privileges) . In order to run pwdump i need administration privileges.Can anyone tell me using which tool i can do this privilege escalation? i tried netddemsg but remotely it's not working
regards
Shadow

Try this http://www.metasploit.com/sc/win32_adduser.exe

can you upload that exploit here, i need to test it too, or if you know the link you can paste that here. thanks