• 1 Post
  • 105 Comments
Joined 1 year ago
cake
Cake day: June 12th, 2023

help-circle






  • elvith@feddit.detolinuxmemes@lemmy.worldmv Windows Linux
    link
    fedilink
    arrow-up
    3
    ·
    edit-2
    3 months ago

    I found a blog post outlining exactly that. If you use it locally, it will install and start a service temporarily. That service runs as SYSTEM and invokes your command. To succeed, you need to be a local administrator.

    If you try the same remote, it tries to access \\remote-server-ip\$admin and installs the service with that. To succeed your current account on your local machine must exist on the remote machine and must be an administrator there.

    So in short: It only works, if you’ve already the privilege to do so and the tool itself is not (ab)using a privilege escalation or something like that. Any hacker and virus may do the very same and doesn’t need psexec - it’s just easier for them to use that tool.


  • Never thought about that, but since these tools just work, when you copy them to your PC… how does psexec do that? It’d either need you to be an administrator (and then it’s not really a privilege escalation as you could have registered any program into the task scheduler or as a service to run as SYSTEM) or it’d need a delegate service, that should only be available when you use an installer - which again wasn’t was has been done when just copying the tool.











  • Windows doesn’t have sudo (not yet, at least) and privileges work a bit different as even as an administrator, you may not have full rights.

    To overcome that obstacle, you’d need to run a shell as an administrator (hold CTRL+Shift, then use the start menu entry or right-click it and select run as administrator).

    Next obstacle: We have a separate drive for each partition, but no root folder.

    If we assume we’re running on a laptop or PC with a single drive and a single partition*, then it’s just

    In cmd.exe:

    del /F /S C:\
    

    In Powershell:

    Remove-Item -Recurse -Force -Path C:\
    

    When you want to delete all (mounted) partitions/drives, you need to iterate over them. (Note that’s from the top of my head, didn’t check the script if it works).

    In cmd.exe:

    REM Not gonna do that, I'm no masochist
    

    In Powershell:

    Get-PSDrive -PSProvider FileSystem | Foreach-Object {
        Remove-Item -Recurse -Force -Path "$($_.Name):\"
    }
    

    Done. Mounting additional partitions before that is left as an exercise for the reader.

    *note that even a standard installation of windows creates 3 partitions. One for the bootloader, one for the recovery system and then the system drive. Only the latter is mounted and will be deleted by this. The other two will still be intact.


  • In theory there are unbeatable levels. With some updates Nintendo fixed glitches, hit boxes, etc. Usually, when you play a level that was uploaded on an older version of the game, you get the old behavior. But there was one update, which did not adhere to this, and which did cause some levels (designed with now fixed glitches) to be unbeatable now.

    But this project isn’t about beating all levels, it’s about beating all uncleared levels. Since those glitch levels probably were beaten before the patch OR you might be able to play them on an older version of the game (if the server allows it), these shouldn’t be a huge problem.