3 ms·
No, if I exploit your computer and have admin rights, I can use this technique to enable persistent access to it over RDP. This is a common technique that hacke
by dguido 12y ago
No, if I exploit your computer and have admin rights, I can use this technique to enable persistent access to it over RDP. This is a common technique that hackers use in enterprise networks.
- Someone1234 12y agoMeh. If someone has admin on a machine then they can re-establish access in a number of ways (e.g. their own VNC service, their own Powershell instance bound to a port, malware, etc). Binding sticky keys to CMD is one of the worst ways as it can be detected easily (either via people trying to use Magnifier and getting CMD, hitting shift 5x times, etc), it can be fixed by Windows updates even by accident (and will be fixed via SFC), and could allow other competing "hackers" to access the machine. I've never seen anyone use this trick in reality and I've certainly never read about "hackers" using it. They typically like to use a tiny single-file VNC server with a hardcoded user/password.