hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

ShadowRun
I have access to m$ box
all my commands are done as a SYSTEM user
i can view falders download via ftp.exe copy delete
but i cant for example
net start
ipconfig

proggies like
nc, pss, tlist, pwdump do nothing

what i can do to check what's the problem
or how do i call commands so i can be administrator for example not SYSTEM
because i think it's a major cause of my problems
or how to call commands
do i have to set enviromental variables or sth else?

greetz
SR
Erra
Are you 100% sure you have system rights? Cause system should give you access to most things, and most definately rights to net start and run NC commands. (sfaik)

can you do a net user and see what other users there are on that machine?

What about just net start to get a list of what services are running, does that work?

ShadowRun
i'm testing all on my box currently
i figured out that the problem is elsewhere
i run cmd /c
i try different types but have to kill the prcess from task manager(/k)
or the cmd gives me no response and quits(/c)
only system commands work ok like dir copy etc (in /c mode)

example
CODE
cmd /c ipconfig
result :

CODE
cmd /c net user
result :


1st line - command
2nd - "result :" + output :/

i run all using java runtime.exec()
ShadowRun
i have small progress
running
CODE
cmd /c ipconfig

returns nothing

but when i run
CODE
ipconfig

i get the results

still no results with net user sad.gif
nmcog
Are you sure it is SYSTEM?

Execute whoami.exe from http://unxutils.sourceforge.net/
ShadowRun
i figured out that's because of path variable
when i copied all to system32 dir it started running
now i have to check if all of this is running smile.gif

and yes it is SYSTEM

anybody knows how to modify path with cmd /c
cause i think it looses it while terminating cmd

i can modify autoexec.bat but it requires reboot

and still cant run net sad.gif
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.