[Striploin]

Hello, And a sorry for the "newbish" manner or this thread, and sorry if this is in the wrong location.

My goal is to run a .exe on a public computer. (So I can download files from a server, because I have really slow internet speeds)

{Computer is running Windows XP}

All .exe are blocked by group policy.
Windows + R is blocked
cmd.exe is blocked
regedit it blocked.
C: Drive is blocked. (Though, I found a way to bypass this)
Ctrl + Alt + Delete goes from windows xp to "Windows 7 Embedded System", no options to select.

Only programs that are unblocked are Mozilla Firefox and Microsoft Word.

Any Ideas? Thanks very much.

[f3rzfr4u]

try to open word and then select "open files"...then select filter to "all types of files". Then hit right mouse and select "new"....then type "load.bat"....the file should convert to a batch file....hit right mouse and select "edit"...notepad should open and there you type "cmd" (without the "")...save.....start word again, hit open and browse to the folder where load.bat is located....hit right mouse and select "open"....you should have a cmd shell now.

[Striploin]

try to open word and then select "open files"...then select filter to "all types of files". Then hit right mouse and select "new"....then type "load.bat"....the file should convert to a batch file....hit right mouse and select "edit"...notepad should open and there you type "cmd" (without the "")...save.....start word again, hit open and browse to the folder where load.bat is located....hit right mouse and select "open"....you should have a cmd shell now.

"Command Prompt Disabled by your administrator"

[Faith Connors]

"Command Prompt Disabled by your administrator"

try command.com or powershell instead of cmd.exe

[Striploin]

try command.com or powershell instead of cmd.exe

Powershell works, but can't add reg key's, nothing that requires admin permission

[f3rzfr4u]

Windowe XP screensaver priviledge escalation exploit:

1)browse to c:\windows\system32 (you mentioned that you can bypass the lock on c:)...
2)rename cmd.exe to logon.scr (delete logon.scr before doing that).
3)logoff and wait until screensaver pops up....you should have a cmd.exe with administrative privileges now.