RE: hacking win2kPro out of the box

[Philip Wagenaar <pb.wagenaar () chello nl>]

Hi,

Take a look at http://www.packetstormsecurity.com
This site keeps track of a lot of exploits. I bet you can find some exploits
there.

Philip Wagenaar
http://www.gochem.tk


> -----Oorspronkelijk bericht-----
> Van: q q [mailto:systemcracker () gmail com]
> Verzonden: vrijdag 3 december 2004 16:24
> Aan: security-basics () securityfocus com
> Onderwerp: hacking win2kPro out of the box
>
> Hello there.
>
> I've just installed win2k pro on an ntfs drive, I'm running zonealarm
> and AVG antivirus, and not much else. (no service packs, patches,
> upgrades or anything else like that)
>
> Does anyone have any information on common attacks for local
> priviledge escalation, and ways to secure against these?
>
> The sort of thing I'm looking for is a detail of an attack, followed
> by the procedure(s) I would use to:
>
> a) recover from it if neccessary
> b) thwart future attacks of it's type.
>
> I basically want to swap roles between hacker and sysadmin so I can
> learn more about the best of both worlds.
>
> The box is not connected to the net.
>
> many thanks,
> -h.
>
> ---
> PHP, mySQL Security at http://www.puremango.co.uk

----------------------------------------
My Inbox is protected by SPAMfighter
2331 spam mails have been blocked so far.
Download free www.spamfighter.com today!