flat assembler
Message board for the users of flat assembler.

Index > Heap > Is program running with restricted rights

Author
Thread Post new topic Reply to topic
Fixit



Joined: 22 Nov 2012
Posts: 161
Fixit
I hope this is the best forum for this post.

I would like help with writing a program.

Maybe call it Program_7.exe.

Specifics

You are logged in as an admin.

You start Firefox using Runas using a limited user account.

A second program, Program 7.exe is started.

It determines if notepad, which is still open, is running with admin rights.

A console program would probably be a good choice for Program_7.exe.

Best regards,

Andy
Post 19 Jan 2013, 12:19
View user's profile Send private message Reply with quote
typedef



Joined: 25 Jul 2010
Posts: 2913
Location: 0x77760000
typedef
Quote:

You are logged in as an admin.

You start Firefox using Runas using a limited user account.

Why not just start the program since you're already in Admin mode?

MSDN
Google
Post 19 Jan 2013, 20:31
View user's profile Send private message Reply with quote
f0dder



Joined: 19 Feb 2004
Posts: 3170
Location: Denmark
f0dder
Fixit wrote:
It determines if notepad, which is still open, is running with admin rights.

And then what is it supposed to do?

typedef wrote:
Fixit wrote:
You are logged in as an admin.

You start Firefox using Runas using a limited user account.
Why not just start the program since you're already in Admin mode?

Because it's a really really really bad idea to run your browser with admin privileges?

Heck, Fixit, why are you logging in with full admin privileges (I'm assuming an admin account with UAC disabled) anyway? Seems like a prettttty bad idea to me.

_________________
Image - carpe noctem
Post 19 Jan 2013, 21:29
View user's profile Send private message Visit poster's website Reply with quote
Fixit



Joined: 22 Nov 2012
Posts: 161
Fixit
Is the same fodder who used to use masm?

No need to worry.

I use a H.I.P.S. program and know whenever M.S. or any other program wants to phone home or "go into my fridge".

I surf safe.

Do you understand my post ?

I believe I will need help with Access Tokens for this project.

Take care.
Post 19 Jan 2013, 23:51
View user's profile Send private message Reply with quote
Fixit



Joined: 22 Nov 2012
Posts: 161
Fixit
typedef wrote:
Quote:

You are logged in as an admin.

You start Firefox using Runas using a limited user account.

Why not just start the program since you're already in Admin mode?

MSDN
Google


You might want to reread my post.
Post 19 Jan 2013, 23:55
View user's profile Send private message Reply with quote
f0dder



Joined: 19 Feb 2004
Posts: 3170
Location: Denmark
f0dder
Fixit wrote:
Is the same fodder who used to use masm?

It's the f0dder that's been around since whenever - yes, tasm/masm/fasm/yasm/whaetever.

Fixit wrote:
I use a H.I.P.S. program and know whenever M.S. or any other program wants to phone home or "go into my fridge".
I surf safe.

IMHO you gain more safety from running unprivileged than from having a HIPS - and if you do take the speed and convenience hit from running a HIPS, I have a hard time understanding why you're opposed to doing your daily from from a LUA. Of course LUA + HIPS is even better, but whatever.

Fixit wrote:
Do you understand my post ?
I believe I will need help with Access Tokens for this project.

Well, actually I don't Smile - explain your needs better.

"It determines if notepad, which is still open, is running with admin rights." - so, what do you need? A routine that detects if some_process runs with admin_privs, or do you need a program that reacts on that condition, and if so, what kinda of reaction?

_________________
Image - carpe noctem
Post 20 Jan 2013, 00:57
View user's profile Send private message Visit poster's website Reply with quote
Fixit



Joined: 22 Nov 2012
Posts: 161
Fixit
I have run as a LUA but grew weary of doing RunAs on a frequent basis.

I use psexec.exe to start FF as a limited user and want to verify that I didn't accidentally start it up with full rights.
Post 20 Jan 2013, 01:38
View user's profile Send private message Reply with quote
Fixit



Joined: 22 Nov 2012
Posts: 161
Fixit
Yes, a routine that detects if some_process runs with admin_privs.
Post 20 Jan 2013, 02:19
View user's profile Send private message Reply with quote
asmhack



Joined: 01 Feb 2008
Posts: 431
asmhack
Post 21 Jan 2013, 14:03
View user's profile Send private message Reply with quote
f0dder



Joined: 19 Feb 2004
Posts: 3170
Location: Denmark
f0dder
Fixit wrote:
I have run as a LUA but grew weary of doing RunAs on a frequent basis.

Ah, stuck on XP?

_________________
Image - carpe noctem
Post 21 Jan 2013, 16:05
View user's profile Send private message Visit poster's website Reply with quote
Fixit



Joined: 22 Nov 2012
Posts: 161
Fixit
I mess around with Linux Puppy and Mint.

I have them on pen drives, and I like the near lightning speed but I am having a hard time getting them to consistently work.

I have discovered that Data Traveler just aren't bootable, at least the 2 GB
ones that I have tried.

I like to store zip files on the same pendrive, maybe that is causing some issues ?

Andy
Post 02 Feb 2013, 19:57
View user's profile Send private message Reply with quote
f0dder



Joined: 19 Feb 2004
Posts: 3170
Location: Denmark
f0dder
In my experience, pendrives are generally not very stable - but that's stuff like data corruption and simply dying overnight.

You have one you can't make bootable? Did you manually set up the partitions (diskpart or some linux partition editor), or did you use the partitions it came with? I usually need to use diskpart to mark the partition as bootable, and bootsect.exe from the Vista/Win7/Win8 install dvd to install bootsectors.
Post 03 Feb 2013, 00:28
View user's profile Send private message Visit poster's website Reply with quote
Display posts from previous:
Post new topic Reply to topic

Jump to:  


< Last Thread | Next Thread >
Forum Rules:
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Copyright © 1999-2020, Tomasz Grysztar.

Powered by rwasa.