Talk:Privilege escalation

message: I've also heard this term dealing with the fact that many of the individual privileges of a superuser can be used to obtain the others, including the ability to run in kernel mode.
For example, if a Windows program is granted SeDebugPrivilege - the right to debug any process in the system regardless of owner - it can escalate its privilege further by leveraging SeDebugPrivilege.  It can use that privilege to open a running LocalSystem (akin to UNIX "root") process, such as winlogon.exe, and inject its own code, escalating its privilege to LocalSystem.
Similarly, the SeTakeOwnership privilege, which allows taking ownership of files without explicit permission, can be used on the Registry to change the Administrator password.
Many Windows privileges allow this sort of escalation, so their closure really ought to be considered a single privilege level.  That's the route UNIX took.
-- Myria 07:59, 28 October 2005 (UTC)
thread_title:  Another meaning? 

message: I've cleaned up the content for this concept a bit, but I dispute that there's a such thing as "horizontal privilege escalation", and not just because the term is a bit of an oxymoron.
"Horizontal" escalation means obtaining unauthorized impersonation rights (I know web apps never call it "impersonation"). Impersonation, a capability built in to a variety of reference monitors (including Unix, Win32, and databases) is an elevated privilege. "Horizontal" escalation is just a use case for a specific, limited form of "vertical" privilege escalation.
The content here is valuable; I'm not advocating that we strike it. I'm just saying that we probably shouldn't muddy it with concepts like "vertical and horizontal". 
--- tqbf 02:00, 1 January 2008 (UTC)
thread_title:  "Horizontal" vs "Vertical" privilege escalation 

message: I can't remember the exact details, but in Windows XP you can use the "at" command under cmd to schedule it to run cmd.exe a minute or 2 in the future. This new cmd process will run under the SYSTEM user for some mysterious reason. You can then end explorer.exe in task manager (which you can run under the new cmd if you're not allowed to run task manager on your own account), run explorer.exe under the cmd window, and therefore be allowed to do things in the Windows shell that you shouldn't have permission to do. Obviously this won't work if the policies have been set to prevent you from running at.
Is this a valid example of a very easy privilege escalation attack?
http://blogs.msdn.com/adioltean/articles/271063.aspx
Tebello TheWHAT!!?? 18:54, 9 June 2008 (UTC)
replies: text: Yes, someone with the privilege to schedule jobs on WinXP/Win2k3 and earlier could elevate themselves to Admin in this way.  This route has been blocked in Vista/Server 2008. Socrates2008 (Talk) 21:41, 9 June 2008 (UTC)
thread_title:  Is this an example of Windows privilege escalation? 

message: جيد Ahomed123123 (talk) 00:02, 24 February 2015 (UTC)
thread_title:  جيد 

message: اوافق Ahomed123123 (talk) 00:03, 24 February 2015 (UTC)
thread_title:  اوفق 

message: جيد Ahomed123123 (talk) 00:04, 24 February 2015 (UTC)
thread_title:  جيد 

message: In Windows XP, can press F8 before startup and repeat until menu, in this menu, select safe mode and login to "Administrator" acount.  — Preceding unsigned comment added by 77.65.88.198 (talk) 17:46, 13 June 2017 (UTC)
thread_title:  Safe mode (Windows XP only) 

message: Hello fellow Wikipedians,
I have just modified one external link on Privilege escalation. Please take a moment to review my edit. If you have any questions, or need the bot to ignore the links, or the page altogether, please visit this simple FaQ for additional information. I made the following changes:
*Added archive https://web.archive.org/web/20090303164625/http://dailymobile.se/forum/index.php?topic=1165.0 to http://dailymobile.se/forum/index.php?topic=1165.0
When you have finished reviewing my changes, you may follow the instructions on the template below to fix any issues with the URLs.
Cheers.—InternetArchiveBot (Report bug) 02:27, 15 December 2017 (UTC)
thread_title:  External links modified 

message: A Server Emulator (private Server) is also another form of privilege escalation.--Cartoondude135 (talk) 20:27, 26 July 2021 (UTC)
thread_title:  Server Emulator 

message: — Assignment last updated by FULBERT (talk) 15:49, 14 August 2022 (UTC)
thread_title: Wiki Education assignment: Research Process and Methodology - SU22 - Sect 202 - Tue