Sinisterly
[TuT]Hack admin password from guest account - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+--- Thread: [TuT]Hack admin password from guest account (/Thread-TuT-Hack-admin-password-from-guest-account)

Pages: 1 2


[TuT]Hack admin password from guest account - ahsanciit - 03-10-2011

Ever wanted to hack your college PC with guest account/student or just wanted to hack your friend’s PC to make him gawk when you tell him your success story of hacking? Well,there is a great way of hacking an administrator account from a guest account by which you can reset the administrator password and getting all the privileges an administrator enjoys on windows.. interested? read on…


Concept:

Press shift key 5 times and the sticky key dialog shows up.This works even at the logon screen. But If we replace the sethc.exe which is responsible for the sticky key dialog,with cmd.exe, and then call sethc.exe by pressing shift key 5 times at logon screen,we will get a command prompt with administrator privileges because no user has logged on. From there we can hack the administrator password,even from a guest account.

Prerequisites:

Guest account with write access to system32.

Here is how to do that -

* Go to C:/windows/system32
* Copy cmd.exe and paste it on desktop
* Rename cmd.exe to sethc.exe
* Copy the new sethc.exe to system 32,when windows asks for overwriting the file,then click yes.
When asked to overwrite,overwrite the sethc.exe
* Now log ut from your guest account and at the user select window,press shift key 5 times.
* Instead of sticky Key confirmation dialog,command prompt with full administrator privileges will open.
* Now type “ NET USER ADMINISTRATOR aaa” where “aaa” can be any password you like and press enter.
* You will see “ The command completed successfully” and then exit the command prompt and login into administrator with your new password.
* Congrats You have hacked admin from guest account.

Further..


Also, you can further create a new user at the command prompt by typing “NET USER ARMAAN/ADD” where “ARMAAN” is the username you would like to add with administrator privileges. Then hide your newly created admin account by -

Go to registry editor and navigating to this key

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserLis t]

Here create a new DWORD value, write its name as the “user name” that u created for your admin account!



RE: [TuT]Hack admin password from guest account - Shadow Hunter - 03-10-2011

dude nice post Smile ....pretty helpful..


RE: [TuT]Hack admin password from guest account - harnoor - 03-11-2011

i tried this but when i try to replace the sethc.exe key it says premission requested
need help!!


RE: [TuT]Hack admin password from guest account - harnoor - 03-11-2011

i tried this but when i try to replace the sethc.exe key it says premission requested
need help!!


RE: [TuT]Hack admin password from guest account - Splinter2k - 03-15-2011

No guest user has write permissions to system32. Microsoft isn't that dumb lol surely.

If by magic something a long this line does/did work then it would only work locally (machine your using) due to needing administrator privs to change the password via Active Directory to make changes on the network.

Edit: There was a nice little trick of pulling the CAT5 out of the back of the computer before the user profile was downloaded from the server. Allowing you to have half administrator privs which gave permissions to create new users locally and also setting permissions to use control panel. This no longer works due to an update which made user roaming profiles local if the network was to ever go down. Was pretty good back in the day though, not a lot of people found out about it in school.


RE: [TuT]Hack admin password from guest account - Splinter2k - 03-15-2011

No guest user has write permissions to system32. Microsoft isn't that dumb lol surely.

If by magic something a long this line does/did work then it would only work locally (machine your using) due to needing administrator privs to change the password via Active Directory to make changes on the network.

Edit: There was a nice little trick of pulling the CAT5 out of the back of the computer before the user profile was downloaded from the server. Allowing you to have half administrator privs which gave permissions to create new users locally and also setting permissions to use control panel. This no longer works due to an update which made user roaming profiles local if the network was to ever go down. Was pretty good back in the day though, not a lot of people found out about it in school.


RE: [TuT]Hack admin password from guest account - jayant - 03-26-2011

Can the real admin see who changed this file and created a new acount?
Because I don't want to be caught.
btw, I can acess sys32 @ school with my guest acount!Smile


RE: [TuT]Hack admin password from guest account - 1llusion - 03-27-2011

hm... might try at school Biggrin I found a way, how to access system directories of the main servers. So lets see Biggrin

nice guide Smile


RE: [TuT]Hack admin password from guest account - syabrembo - 04-04-2011

nice guide man..thanks


RE: [TuT]Hack admin password from guest account - v1rtuaL.GobliN - 04-20-2011

wow very nice guide Biggrin