-
For the purposes of your game, yes you'd need full control of the system. In the real world however full system control is frequently just plain not needed. Just remember the CIA, topple any of the three and the controls have failed. (If the computer can no longer keep secrets, what else is it good for?) Typically I would rather allow an attacker to control the system than to be able to access private material. (one does not equate to the other)
I think if you follow my adivce you will have a good chance of complete control, but as far as the directory structure goes, the stuff could be anywhere. You'd do well to start in C:\Documents and Settings\ if it exists.
catch
PS. PHP and mySQL on a Windows system? Heh some people are so silly.
-
Maestro,
Well that 1 step seems to have stumped me for now, but I guess when I have a little more free time I will do what catch has reccomended and see where this gets me.
He has lots of services but they all seem to be current version with exploits not found. There is NETBIOS though ....
