Re: Re: Microsoft RDP Priv. Escalation

[Yousif () Vapt-Sec com]

Mark Owen - Say for example you've downloaded an executable on a computer that you have access to. Also, say the 
account you have access to WILL NOT allow you to run THAT executable. With the "alternateshell" option, you COULD run 
that executable. CMD.EXE Was simply an example as it is commonly disabled on typical user accounts. 

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------