5 ms·
Not really. This is pre-ASLR, so all you need to do is push a string pointer on the stack and call an address. Probably less than 15 bytes of machine code you
by 13of40 9y ago
Not really. This is pre-ASLR, so all you need to do is push a string pointer on the stack and call an address. Probably less than 15 bytes of machine code you'd need to hex-edit into an existing exe.
- Neil44 9y agoIf you have hard drive access you can replace the logon.scr screensaver executable with the command prompt executable, then a few minutes after boot up a command prompt with system privileges will appear by magic.
- deleted 9y ago[deleted]