Top all-time · #9774
Carnal0wnage Blog
Personal blog · carnal0wnage.attackresearch.comsecurity
Carnal0wnage Blog is a personal blog at carnal0wnage.attackresearch.com about security. Since 2013, 8 different Hacker News readers have linked it 9 times. The last post was in 2020, but the archive is still widely read.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
Security blog on penetration testing and Windows privilege escalation. The one HN comment cites an older post from the blog as a guide to a sticky-keys style admin-access technique, alongside a Microsoft fix.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
information security blog about red teaming and offensive techniques
What Hacker News says?
According to step 7 and 8, you only need to create a copy of the cmd binary and name it sethc. Here's a 'guide' from 2012 http://carnal0wnage.attackresearch.com/2012/04/privilege-esc... And here's a 'fix' from microsoft: https://social.technet.microsoft.com/Forums/windows/en-US/a3...
Comment linking /2012/04/privilege-escalation-via-sticky-keys.html
on “How to get into an admin account on a Windows computer”Submitted Full Disclosure – RCEs in nbox recorder as a story · 40 points
HN discussionSubmitted Let's Call Stunt Hacking What It Is, Media Whoring as a story · 12 points
HN discussionSubmitted Vulnerability Disclosure, Free Bug Reports and Being a Greedy Bastard as a story · 3 points
HN discussionSubmitted Basics of Rails Part 5 as a story · 2 points
HN discussionSubmitted DevOoops Presentation by carnal0wnage and cktricky as a story · 1 points
HN discussionSubmitted Mimikatz Against Virtual Machine Memory Part 1 as a story · 1 points
HN discussionSubmitted Stealing passwords every time they change as a story · 1 points
HN discussionSubmitted The Biggest Problem in Computer Security as a story · 1 points
HN discussion