[prev in list] [next in list] [prev in thread] [next in thread] 

List:       focus-ms
Subject:    Re: RE: Scripted Software removal (Encrypting Credentials)
From:       ajb () blyler ! cc
Date:       2005-06-13 20:24:37
Message-ID: 20050613202437.20794.qmail () securityfocus ! com
[Download RAW message or body]

You can also use the Windows API [0] to create a process with a different set of \
credentials.  There are some good examples [1] out there on how to do this.

Since the application would be written in a compiled language someone would have to \
disassemble it in order to obtain the credentials.

- Andy

[0] http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dllproc/base/createprocessasuser.asp
 [1] http://www.andreavb.com/forum/viewtopic_4543.html

---------------------------------------------------------------------------
---------------------------------------------------------------------------


[prev in list] [next in list] [prev in thread] [next in thread]