Metasploit mailing list archives

Win32 net user /add payload


From: Doom2099 at gmx.de (Thomas Schmidt)
Date: Fri, 04 Mar 2005 01:29:34 +0100


Hi list,
I noticed a problem with the "net user x x /add" payload on a german 
Win2k SP4. I was able to successfully run some exploits using this 
payload, thereby creating a new user "test" - but this user was not 
added to the "Administratoren"-Group (notice the slightly different 
spelling of the group name on a german W2k box). Is this a 
language-specific problem or did I get something wrong? If it is 
language-specific, how do change the shellcode?

Regards,
Thomas





Current thread: