Gray Hat Hacking: The Ethical Hacker’s Handbook, Third Edition > Vulnerability Analysis > Exploiting the Windows Access Control Model

Table of Contents

Download Safari Books Online apps: Apple iOS | Android

Entire Site

Free Trial

Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.

This Book

Gray Hat Hacking: The Ethical Hacker’s Handbook, Third Edition

Search

Table of Contents

Pt. I. Introduction to Ethical Disclosure

Pt. II. Penetration Testing and Tools

Pt. III. Exploiting

Pt. IV. Vulnerability Analysis

Ch. 20. Passive Analysis

Ch. 21. Advanced Static Analysis with IDA Pro

Ch. 22. Advanced Reverse Engineering

Ch. 23. Client-Side Browser Exploits

Ch. 24. Exploiting the Windows Access Control Model

Why Access Control Is Interesting to a Hacker

How Windows Access Control Works

Tools for Analyzing Access Control Configurations

Special SIDs, Special Access, and “Access Denied”

Analyzing Access Control for Elevation of Privilege

Attack Patterns for Each Interesting Object Type

What Other Object Types Are Out There?

Ch. 25. Intelligent Fuzzing with Sulley

Ch. 26. From Vulnerability to Exploit

Ch. 27. Closing the Holes: Mitigation

Pt. V. Malware Analysis

Chapter 24. Exploiting the Windows Access Control Model

This chapter will teach you about Windows Access Control and how to find instances of misconfigured access control that are exploitable for local privilege escalation. We cover the following topics:

You are currently reading a PREVIEW of this book.

Get instant access to over
$1 million worth of books and videos.

Start a Free Trial

Download Safari Books Online apps: Apple iOS | Android

This Book

Search

Contents

Part IV: Vulnerability Analysis > Exploiting the Windows Access Control Model

Chapter 24. Exploiting the Windows Access Control Model