Showing posts with label attack. Show all posts
Showing posts with label attack. Show all posts

Friday, 8 July 2011

Windows is not so secure ?

1.user can take ownership of any system files




open notepad.exe and type








Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\*\shell\runas]
@="Take Ownership"
"NoWorkingDirectory"=""

[HKEY_CLASSES_ROOT\*\shell\runas\command]
@="cmd.exe /c takeown /f \"%1\" && icacls \"%1\" /grant administrators:F"
"IsolatedCommand"="cmd.exe /c takeown /f \"%1\" && icacls \"%1\" /grant administrators:F"

[HKEY_CLASSES_ROOT\Directory\shell\runas]
@="Take Ownership"
"NoWorkingDirectory"=""

[HKEY_CLASSES_ROOT\Directory\shell\runas\command]
@="cmd.exe /c takeown /f \"%1\" /r /d y && icacls \"%1\" /grant administrators:F /t"
"IsolatedCommand"="cmd.exe /c takeown /f \"%1\" /r /d y && icacls \"%1\" /grant administrators:F /t"


save as *(any name).reg

invoke the file , this will patch windows registry . so their will be "take ownership" option in the context menu (appear on right click).

2. windows 7 system files can be easily modified .

So here is a list of various system files in Windows 7 which can be easily hacked using Resource Hacker:
Approx. all Windows 7 system icons

Login Screen Background -> %windir%\System32\imageres.dll

Login Screen image resources -> %windir%\System32\authui.dll

Startup Sound -> %windir%\System32\imageres.dll

Start ORB images -> %windir%\Explorer.exe -> Bitmap -> 6801 - 681
 2
 -> %windir%\System32\imageres.dll