I've looked up the accesschk.exe tool which is one way to find services with weak permissions that allow exploitation of the access control model. What is a manual way to do this if I can't get accesschk.exe onto the remote machine?

Say there are also about 50 services to check, and no ability to repeat the last command, meaning most of the command must be manually retyped. Currently the only solution I can think of is writing a script that would attempt to manually change the binPath of all services, and then I'd go through the echoed results to see which did not return an access denied error.

However I'm not so great at scripting, so looking for solutions which avoid that; however if someone does have a script handy that would serve as a solution I would be happy to take it off his/her hands.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.