• 0 Posts
  • 106 Comments
Joined 1 year ago
cake
Cake day: June 12th, 2023

help-circle



  • I remember having a defective hdd in my PC. I brought the pc to the shop, where I bought it from to get it replaced under warranty. They told me they couldn’t restore my data (I had backups) and asked if I wanted them to install windows on it. When they asked for my key I was like “FC…” and they responded “ok, we know that one, no need to spell it out” and proceeded with the installation





  • elvith@feddit.detolinuxmemes@lemmy.worldmv Windows Linux
    link
    fedilink
    arrow-up
    3
    ·
    edit-2
    7 months ago

    I found a blog post outlining exactly that. If you use it locally, it will install and start a service temporarily. That service runs as SYSTEM and invokes your command. To succeed, you need to be a local administrator.

    If you try the same remote, it tries to access \\remote-server-ip\$admin and installs the service with that. To succeed your current account on your local machine must exist on the remote machine and must be an administrator there.

    So in short: It only works, if you’ve already the privilege to do so and the tool itself is not (ab)using a privilege escalation or something like that. Any hacker and virus may do the very same and doesn’t need psexec - it’s just easier for them to use that tool.



  • Never thought about that, but since these tools just work, when you copy them to your PC… how does psexec do that? It’d either need you to be an administrator (and then it’s not really a privilege escalation as you could have registered any program into the task scheduler or as a service to run as SYSTEM) or it’d need a delegate service, that should only be available when you use an installer - which again wasn’t was has been done when just copying the tool.











  • When I was a student, I did an internship in a chemistry lab. On one of the days, someone brought in some samples of skunk secretion for an analysis.

    Everyone was like Not again i dont want that, let the intern do this!

    I thought how bad could it be?. Turns out really bad. It days to stop that smell. And I mostly handled the sealed phials and only opened a single one for a gas chromatography without spilling something…