Hack admin password from guest account
Ever wanted to hack your college PC with guest account/student or
just wanted to hack your friend’s PC to make him gawk when you tell him
your success story of hacking? Well,there is a great way of hacking an
administrator account from a guest account by which you can reset the
administrator password and getting all the privileges an administrator
enjoys on windows.. interested? read on…
Concept:
Press shift key 5 times and the sticky key dialog shows up.This
works even at the logon screen. But If we replace the sethc.exe which is
responsible for the sticky key dialog,with cmd.exe, and then call
sethc.exe by pressing shift key 5 times at logon screen,we will get a
command prompt with administrator privileges because no user has logged
on. From there we can hack the administrator password,even from a guest
account.
Prerequisites:
Guest account with write access to system32.
Here is how to do that -
* Go to C:/windows/system32
* Copy cmd.exe and paste it on desktop
* Rename cmd.exe to sethc.exe
* Copy the new sethc.exe to system 32,when windows asks for overwriting the file,then click yes.
When asked to overwrite,overwrite the sethc.exe
* Now log ut from your guest account and at the user select window,press shift key 5 times.
* Instead of sticky Key confirmation dialog,command prompt with full administrator privileges will open.
* Now type “ NET USER ADMINISTRATOR aaa” where “aaa” can be any password you like and press enter.
* You will see “ The command completed successfully” and then exit
the command prompt and login into administrator with your new password.
* Congrats You have hacked admin from guest account.
Further..
Also, you can further create a new user at the command prompt by
typing “NET USER ARMAAN/ADD” where “ARMAAN” is the username you would
like to add with administrator privileges. Then hide your newly created
admin account by -
Go to registry editor and navigating to this key
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserLis t]
Here create a new DWORD value, write its name as the “user name” that u created for your admin account!
No comments: