WINDOWS PRIVILEGE ESCALATION THROUGH NETWORK BACKDOOR AND INFORMATION MINING USING USB HACKTOOL

Hidayat Ul Hazazi Ab Wahab, Jasni Mohamad Zain
{"title":"WINDOWS PRIVILEGE ESCALATION THROUGH NETWORK BACKDOOR AND INFORMATION MINING USING USB HACKTOOL","authors":"Hidayat Ul Hazazi Ab Wahab, Jasni Mohamad Zain","doi":"10.24191/mjoc.v3i1.4811","DOIUrl":null,"url":null,"abstract":"A privilege escalation in the Windows system can be defined as a method of gaining access to the kernel system and allowing the user to have an administrative access to the local admin account system on the computer. This paper describes the proof of concept attack scheme using Universal Serial Bus (USB) Hacktool. The attack scheme, the same interaction on the physical access to the computer system could be accomplished by the attacker using a little effort on social engineering and specialized USB Hacktool to take over the computer system in full where it will collect valuable information and escalate the administrative privilege to gain unauthorized admin access which further attack can be done like setting up an open port for backdoor access. The evaluation of this paper gives a significant value as for educational purpose for proof of concept security project. The implementation on this project could help the responsible team to take necessary action toward physical security access to their computer or workstation.","PeriodicalId":129482,"journal":{"name":"MALAYSIAN JOURNAL OF COMPUTING","volume":"26 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2018-06-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"MALAYSIAN JOURNAL OF COMPUTING","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.24191/mjoc.v3i1.4811","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 0

Abstract

A privilege escalation in the Windows system can be defined as a method of gaining access to the kernel system and allowing the user to have an administrative access to the local admin account system on the computer. This paper describes the proof of concept attack scheme using Universal Serial Bus (USB) Hacktool. The attack scheme, the same interaction on the physical access to the computer system could be accomplished by the attacker using a little effort on social engineering and specialized USB Hacktool to take over the computer system in full where it will collect valuable information and escalate the administrative privilege to gain unauthorized admin access which further attack can be done like setting up an open port for backdoor access. The evaluation of this paper gives a significant value as for educational purpose for proof of concept security project. The implementation on this project could help the responsible team to take necessary action toward physical security access to their computer or workstation.
利用usb黑客工具通过网络后门进行Windows特权升级和信息挖掘
Windows系统中的特权升级可以定义为一种获得对内核系统的访问权限并允许用户对计算机上的本地管理帐户系统具有管理访问权限的方法。本文介绍了一种利用通用串行总线(USB) Hacktool的概念验证攻击方案。攻击方案,对计算机系统的物理访问上的相同交互可以由攻击者使用社会工程和专门的USB Hacktool的一点努力来完成,以完全接管计算机系统,在那里它将收集有价值的信息并升级管理权限以获得未经授权的管理访问,进一步的攻击可以像设置一个开放的端口一样进行后门访问。本文的评价对概念验证安全项目具有重要的教育意义。这个项目的实现可以帮助负责的团队采取必要的行动,以物理安全的方式访问他们的计算机或工作站。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
求助全文
约1分钟内获得全文 求助全文
来源期刊
自引率
0.00%
发文量
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术官方微信