I was reading how exploits usually work and how they have been used in the past etc etc.
I wanted to know, if there are still some exploits that can work with minimal user allowed access?
For example, earlier an autorun could work in a USB. If the autorun started and the user just clicked on Yes for once on the autorun (the first prompt that comes because of the autorun), I could possibly run ANY script I wanted on the USB.
But now, this is not possible since from Vista onwards I believe, I cannot configure the autorun in an USB. This feature has been disabled. (PLEASE FEEL FREE TO POINT OUT IF THIS CAN STILL WORK).
I can still think of a lot of things I can do to a linux box and exploit it. However, I wanted to know are there any such exploits for Windows?
Another example, I can write a python script that traverses through each file until a particular file is found and then emails me the content of it. All of these being completely automated. And as you would have easily guessed, the problem here is making the user run .exe. I cannot disguise the running of exe (IF SOMEONE KNOWS THIS, I WOULD WANT TO KNOW HOW!) hence, I believe is not an exploit that would work.
So I hope, this clears up what I mean by a potential exploit. Something that could use some user intervention like clicking a button or something (but not something like running an exe because nobody is that stupid). So yeah,
Are any of the following scenarios possible?
Is there a way I can connect to a windows machine and get access (the other machine being on same local network)?
I can fool the user to run a script on his machine? (Something like the USB example I thought of, but I later realized that it wouldnt work for Vista onwards).
P.S: This is just out of plain curiosity/eagerness to learn new things and not for any bad thing or something.
Feel free if I am missed a tag or something.