But thats post-auth, requires valid credentials?
-
-
I don’t think so, as you need admin rights to install the psexec service first.
-
I suppose so. I guess I understand your perspective now, but I think LPE is still more accurate. But a very fun bug either way
@iagox86
- 32 more replies
New conversation -
-
-
Psexec requires you to install a service, which means running OpenSCManager with SC_MANAGER_ALL_ACCESS. Webexec only requires you to start a service, which is a very small set of permissions (SC_MANAGER_CONNECT) - *any* local/domain user can do it with no special groups
-
Right, psexec needs an administrator to turn it on before it can be used. If it didn't, you would consider it an RCE?
- 4 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
