In a previous tip about the 10 most common Windows vulnerabilities, I outlined the Windows flaws I see the most in my security assessment work. Now I want to take the two particular vulnerabilities I see more than any others and show you how they’re exploited. You can then use these techniques on your Windows systems to find the holes before a malicious user does. One exploit is relatively non-technical and the other goes a little more in-depth but certainly doesn’t require “elite” hacker skills. Either way, you can execute each of them using free tools in a matter of minutes. Let’s jump right in.
By: Kevin Beaver, CISSP