Author Topic: Change Win Proxy Server Settings Locked by Admin  (Read 1131 times)

0 Members and 6 Guests are viewing this topic.

Offline An Alien

  • NULL
  • Posts: 3
  • Cookies: 0
    • View Profile
Change Win Proxy Server Settings Locked by Admin
« on: March 17, 2015, 02:16:15 pm »
Hi guys,

I'm a QA tester testing a laptop which is supposed to be used as a kiosk. Windows 7 is installed and the user has very limited control + everything not needed is uninstalled. I'm supposed to figure out if there's any way of bypassing the measures they have put into place such as a locked down proxy server settings (settings are managed and blocked by admin).

The main use of this "kiosk" is that when computer starts up, it will automatically fire up IE 9 and load up the ONLY domain allowed by the proxy server. So anything but example.com will not work (I get "The proxy server isn't responding" error going to google.com).

If I go to settings for IE and try changing the proxy settings, I get something similar to this (my LAN settings is also grayed out): -connections.jpg

Is there any way of changing the proxy server settings if they are locked down by admin?
« Last Edit: March 17, 2015, 02:21:17 pm by An Alien »

Offline TeamVega

  • Serf
  • *
  • Posts: 32
  • Cookies: -2
    • View Profile
Re: Change Win Proxy Server Settings Locked by Admin
« Reply #1 on: March 17, 2015, 02:51:45 pm »
You can change the registry entries to allow you access - so disable the registry and the command prompt, also ensure that they cant install another browser

Offline An Alien

  • NULL
  • Posts: 3
  • Cookies: 0
    • View Profile
Re: Change Win Proxy Server Settings Locked by Admin
« Reply #2 on: March 17, 2015, 03:40:04 pm »
The user does not have the rights to install anything so no browsers can be installed.


User does have limited access to command prompt. Also, the registry is available as well.


Do you know the specific registry keys/values which are used for the proxy server settings?
« Last Edit: March 17, 2015, 03:59:52 pm by An Alien »

Offline TETYYS

  • /dev/null
  • *
  • Posts: 16
  • Cookies: -12
    • View Profile
Re: Change Win Proxy Server Settings Locked by Admin
« Reply #3 on: March 18, 2015, 02:53:14 pm »
Use latest Windows privilege escalation exploit.

Offline chris

  • EZ's GOD
  • VIP
  • Knight
  • *
  • Posts: 197
  • Cookies: 37
  • What should I put here :(
    • View Profile
Re: Change Win Proxy Server Settings Locked by Admin
« Reply #4 on: March 19, 2015, 06:34:29 am »
Do you know the specific registry keys/values which are used for the proxy server settings?

I believe it is hkcu\software\microsoft\windows\currentversion\internet settings

They could change it in there possibly. Or if they can escalate privileges they could delete the group policy.
« Last Edit: March 19, 2015, 06:35:28 am by chris1 »
<chris1> give me a idea of a img to use for a avatar
<HTH> A cock

Offline iTpHo3NiX

  • EZ's Pirate Captain
  • Administrator
  • Titan
  • *
  • Posts: 2920
  • Cookies: 328
    • View Profile
    • EvilZone
Re: Change Win Proxy Server Settings Locked by Admin
« Reply #5 on: March 19, 2015, 07:39:52 am »
Also make sure sticky keys settings are blocked so it can't be replaced with a command prompt. If they can get into the Win/system32 files they can replace sticky keys with it, log out then hit shift a bunch of times and have an admin command prompt and use net admin command to add a new admin user.

Also ensure that exes can't run off of a USB as someone can download a stand alone group policy editor and change the settings to reenable locked down features. Also remove access to CD/Floppy for the same reason
[09:27] (+lenoch) iTpHo3NiX can even manipulate me to suck dick
[09:27] (+lenoch) oh no that's voluntary
[09:27] (+lenoch) sorry

Offline nrael

  • Peasant
  • *
  • Posts: 66
  • Cookies: -7
    • View Profile
Re: Change Win Proxy Server Settings Locked by Admin
« Reply #6 on: March 19, 2015, 09:55:32 am »
firefox has it's own proxy settings window.... just download the portable one and change it

Offline An Alien

  • NULL
  • Posts: 3
  • Cookies: 0
    • View Profile
Re: Change Win Proxy Server Settings Locked by Admin
« Reply #7 on: March 19, 2015, 02:00:09 pm »
For some reason the portable firefox browser wasn't working. I have to try that again. I did use a different portable application called Ultrasurf which allowed me to circumvent the proxy easily.

Thanks guys for all the feedback. Disabling exes from usb are very important.

Offline nrael

  • Peasant
  • *
  • Posts: 66
  • Cookies: -7
    • View Profile
Re: Change Win Proxy Server Settings Locked by Admin
« Reply #8 on: March 19, 2015, 09:46:50 pm »
yeaaah coool