[Full-Disclosure] Windows user privileges

James Tucker jftucker at gmail.com
Thu Nov 25 04:31:12 GMT 2004


Use "IEXPLORE.EXE [PATH]" to get a working copy of explorer using the
runas service.
eg.
runas /user:system\user  "%PROGRAMFILES%\Intern~1\iexplore.exe [path]"

No bitching about the fact that its the IE exe we are loading, it
makes no difference, thats just a wrapper to load the libraries, you
can do the opposite and turn an explorer window into IE by [F4]
HTTP:// [ENTER]. As for people who uninstall IE, well thats fine I
have, but the EXE is still lurking there (it could otherwise be done
with the windows update explorer window spawning).

If you want to construct a proper right click option for folders in
explorer then the place to put it would be some where around
HKEY_CLASSES\Directory\shellex\




Full-Disclosure is hosted and sponsored by Secunia.