4 ms·
I think we all realize that you don't need admin privileges to do harm. Simply having any kind of access is sufficient. But if you want to install a system wide
by la_barba 7y ago
I think we all realize that you don't need admin privileges to do harm. Simply having any kind of access is sufficient. But if you want to install a system wide keylogger to get access to bank/finance logins, for e.g.. admin privs help.
- AnIdiotOnTheNet 7y agoEh, not as much as you'd think. I've written keyloggers. In the XP days running a keylogger under local admin ensured you'd get everything, but that stopped working around the time of Vista. So now what you have to do is launch your keylogger process in the user session context anyway. Admin access would just get you the ability to do it to more than just the initially compromised account, but in my experience workstations are 1:1 so that doesn't really get you anything.
- la_barba 7y agoHmm, don't you need SeDebugPrivilege to access the process space of another process launched by the same user account?