CodeGuru Home VC++ / MFC / C++ .NET / C# Visual Basic VB Forums Developer.com

Search:

Type: Posts; User: AgentSmithers

Page 1 of 5 1 2 3 4

Search: Search took 0.03 seconds.

  1. Re: Driver Hooking Via KeServiceDescriptorTable

    Nah, It was still interesting coming back to an old topic :)
  2. ImpersonateNamedPipeClient CreateProcessAsUser Network Cred not Valid

    Okay so in a Nutshell this is what I've done.

    I've created a NamedPipeServer on Computer A
    Computer B, Logged in as a Domain Administrator connects to Computer A
    Computer A calls...
  3. Replies
    1
    Views
    3,476

    Re: Injecting Into Lsass for Cryted Data

    Okay, I'm getting really warm, I guess Now I need to enum the SIDs of the users I want to extract then call the Decrypt API.

    AS Quoted



    I'm getting warm, looks like my code is 1/2 dones I...
  4. Replies
    1
    Views
    3,476

    Injecting Into Lsass for Cryted Data

    .386
    .model flat,stdcall
    option casemap:none
    include \masm32\include\windows.inc
    include \masm32\include\kernel32.inc
    include \masm32\include\user32.inc
    ...
  5. Replies
    2
    Views
    838

    Re: ImpersonateNamePipeClient

    Okay more and more now I find that I am drifting away from this being a network topic, So I figure in the given situation that now I need to extract the Network Cred's from the Client machine and...
  6. Replies
    2
    Views
    838

    Re: ImpersonateNamePipeClient

    Perhaps CredEnumerateW is what I'm looking for along with CredRead and CredWrite?

    http://msdn.microsoft.com/en-us/library/aa374731%28v=VS.85%29.aspx
  7. Replies
    2
    Views
    838

    ImpersonateNamePipeClient

    Alright this was a bit of a surprise but I guess I should of seen it coming.

    I am a Domain admin and I create a CLient Server Model of a Remote Shell CreateProcessAsUser with NamedPipes and...
  8. Re: CreateNamedPipe and StdInput, WaitForSingleObject

    Cuz its faster then C++ =D Let runtime requirements too.

    And the answer to this riddle is, Don't use one NamedPipe, Use two for in and Out :D
  9. CreateNamedPipe and StdInput, WaitForSingleObject

    Hi Guys, Currently I am writing this app to pipe information to a remote shell on my local machine, I prefer to do it through named pipes so I can use it over the network and impersonate the client...
  10. Replies
    3
    Views
    751

    Re: Send User Token Across the Network

    Hmm that seems like a good idea, Got a POC of using COM, I've never used it before.
    Would a NamedPipe also work with its Impersonation API then use CreateProcess?
  11. Replies
    3
    Views
    751

    Send User Token Across the Network

    Hi Everyone!

    I am currently running in a Domain Environment as a Domain Administrator, My goal is to be able to Loan by Token out to remote users so they can create Applications using my Domain...
  12. Anyone here have an Example of Extracting a User Token?

    My goal is to take a User's process and to extract a token out of the Process anyone have a POC for this?

    Also how to send my Token to another process over a socket remotely to another machine on...
  13. Replies
    3
    Views
    1,816

    Re: NetScheduleJobAdd NOW

    Remotly? In XPSP2?
  14. Replies
    3
    Views
    1,816

    NetScheduleJobAdd NOW

    Currently I'm scheduling task remotely on my domain but as of right now I'm using windows API NetScheduleJobAdd to add the task to the nearest minute then have the application execute. but I notice...
  15. Run Application under UNC permissions

    Hello hello.

    When a user opens a UNC path to a remote machine on a server, the server will Prompt them for a logon username and password to access the remote share, is there a way to code an...
  16. Replies
    0
    Views
    800

    Null Session 2000 Virus

    Alright, about a week ago I got a Virus hitting the network trying to use a Null session exploit from back in the day and one of my unpatched machines got hit. The PCAP is as follows.

    I attached...
  17. Re: 2 Issues with SetPrinter and Add Printer

    Hmm In the registry the Printer Attributes show 2208 but when I pull it from the API it shows 2248. maybe my structure is wrong?

    I got the Attributes in the registry from...
  18. Re: 2 Issues with SetPrinter and Add Printer

    Imports System.Runtime.InteropServices
    Public Class Form1

    'declare the API in VB
    Private Declare Function AddPrinter Lib "winspool.drv" Alias "AddPrinterW" (ByVal pName As IntPtr, ByVal...
  19. Re: 2 Issues with SetPrinter and Add Printer

    Thats funny, I used the Same exact code already to try to impersonate a another domain administrator, would it be better if I try to impersonate a Builtin Administrator account on the server??
    ...
  20. Re: 2 Issues with SetPrinter and Add Printer

    I would really like to go this route though, do you have any information that can perhaps point me in the right direction? =)

    Thanks!
  21. Re: 2 Issues with SetPrinter and Add Printer

    Hmm I have bets agence it targeting the local machine, So What do you think would be the best way to fix this if its running as the UserAccount?

    I have a WMI script that does the same thing and...
  22. Re: 2 Issues with SetPrinter and Add Printer

    But I created the printer with the same script... Its so odd. Do I need to mod the security Descriptor to apply that? -.-

    When I create the Printer, I'm logged in as a Domain Administrator.
  23. 2 Issues with SetPrinter and Add Printer

    Imports System.Runtime.InteropServices
    Public Class Form1

    'declare the API in VB
    Private Declare Function AddPrinter Lib "winspool.drv" Alias "AddPrinterW" (ByVal pName As IntPtr, ByVal...
  24. Re: Spoofing Source Mac Works on hardwire Only

    Well at least you got your first post in on code Guru.... Anyone have any information that is relevant to the topic though? :)
  25. Re: Spoofing Source Mac Works on hardwire Only

    What? I can't tell if your asking or telling me something.
Results 1 to 25 of 108
Page 1 of 5 1 2 3 4





Click Here to Expand Forum to Full Width

Featured