Hello! I'm having a hard time escaping/using RDweb access as a foothold because it's limited to pre-set programs and explorer is not one of those. Any experienced pentesters that can spare a tip? How do i launch explorer/cmd/powershell in this situation? Thanks.
-
XSS.stack #1 – первый литературный журнал от юзеров форума
escaping RDweb limitations
- Автор темы iHack
- Дата начала
1. Press ctrl + alt + del and open task manager. From task manager, launch cmd or powershell.
2. Explore the program in which you are stuck. Some times, there are options to import or save, in which you will be able to open file explorer. From there, you can open a new window, and you will have a way to access cmd or powershell (if it's not disabled by admin)
3. Don't be discouraged. From my experience, there's always a way to use the entire system.
2. Explore the program in which you are stuck. Some times, there are options to import or save, in which you will be able to open file explorer. From there, you can open a new window, and you will have a way to access cmd or powershell (if it's not disabled by admin)
3. Don't be discouraged. From my experience, there's always a way to use the entire system.
Последнее редактирование:
There is also a variant of calling key sticking, then opening settings and from there calling cmd.
It depends how they block it. If task manager doesn't work you may find allowed applications that you can run commands with instead of cmd and powershell. Like: https://github.com/bohops/UltimateWDACBypassList
- Автор темы
- Добавить закладку
- #5
in this particular case, since the sys admins had very little hardening in place, 2 approaches worked: opening a save window and opening cmd from it's path and sticky keys > help > open control panel > open cmd. thanks for the advice