Full Disclosure mailing list archives

RE: Psexec on *NIX


From: Michael Gargiullo <mgargiullo () warpdrive net>
Date: Fri, 07 May 2004 11:00:22 -0400

On Fri, 2004-05-07 at 08:08, Aditya, ALD [Aditya Lalit Deshmukh] wrote:

So you want all the functionality of psexec without installing psexec?

psexec in installed on the machine ( the laptop ) and not on the server so there is nothing to install on the other 
machine
correct... My statement still stands


You want to remote control any windows machine from your linux laptop?
    Without rdesktop, vnc, or previously touching any machine.


not full control but just enough to start one program which would be run and copied on the targer machine only when 
the source machine has a username / passwd combo

This wasn't stated in the original question.  If fact he stated he
wanted to be able to walk up to a random network and be able to use this
functionality.



You need to do a lot more windows programming reading or are you 
trolling.


this would require a lot of unix programming because he wants something that would run on unix and a good 
understanding of how windows internals work ;) how about asking the sysinternals.com guys to do this for u they have 
all the necessary skills to do this i think.

Can we agree...it would take some programming :)


Your digging for a magic worm you can let loose on a windows network,
and control any machine you want on it. Any real admin isn't that lazy. 

worm ? how about using this command to push tightVNC + ssh ( vnc with zip compression and ssh for encryption ) on the 
desktop start it up and stop and delete it after use so as to close this hole. i would personally like to do this 
many times from my unix systems and i do this from my windows systems plenty of times and it works great

And I use ssh host 'command'.  He stated he didn't want vnc or ssh.


If you are for some reason a real admin looking for this functionality,
let me know, 

you just found one, when my system is running linux, freebsd or solaris i sorely miss this type of command line tool.

why can't you use psexec via wine

so,  I can come over and sniff for your wireless AP, and send
random commands to your windows servers as well.  Come on...Windows
isn't that insecure... 

you need to have a valid username / passwd for the machine to do this and i know there are plenty of way to get this 
but then if u can get a valid username / passwd combo then any system can be compromised.

Except the one that's turned off, locked in a bank vault ;)


-aditya

-Mike


________________________________________________________________________
Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: