screen saver privilege

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
I'm sure that most of you have heard of the privilege escalation
technique of replacing logon.scr with cmd. well I was playing around
on the computer and decided to install cmd as an option for a user
screen saver. However when the prompt was not run with system rights
as when it is when it replaces logon.scr. I was wondering if anyone
knew why this was?

Re: screen saver privilege wrote:

Quoted text here. Click to load it

We've heard a lot about it, but this still doesn't make it a privilege
escalation. To replace logon.scr, you already need to have admin rights.

Quoted text here. Click to load it

Of course not, it is run with the rights of the user.

Quoted text here. Click to load it

WinLogon uses Impersonation to execute the CreateProcess() call with the
credentials of the user. On Windows Server 2003 and later, it uses

Site Timeline