XSS Attacks

368 Chapter 7 9 Exploit Frameworks

What is more interesting is that Firefox also allows administrative shares to be accessed

viafile://URLs

if the current user is running as Domain Administrator or as Local

Administrator with the same Administrator credentials on other systems. Administrative

shares are hidden shares with names like

C$

or

D$,

that correspond to windows drive letters

and, like the above examples, can also be accessed by either IP address or NetBIOS names.

This means that if the attacker hijacks a Window administrator user, the attacker can scan

other networks ...