how to hack administrator using guest account in windows
Hi friends , This topic is very much interesting . This post explained how to hack admin account using guest account. In colleges , schools etc. we know that admin account remains password protected and only guest account is open to use. Thus if we are using guest account then we can access admin account .
What is the basic concept behind this ?
We all know that in windows pressing 5 times shift key opens sticky key dialog. This sticky keys dialog is also opened when we are at login page of windows. So the basic concept is that if we press shift keys 5 times and instead of sticky keys dialog , command prompt opens then we can run any command and thus admin is hacked. But to make command prompt appear instead of sticky keys dialog we need guest account . This is called Backdoor .
What is the real story behind all this ?
Actually when we press shift keys 5 times then sethc file is called . So now if we place cmd.exe (command prompt file ) with name sethc in the same folder then when we'll press shift keys 5 times then command prompt will open ( because we have replaced that original sethc with cmd file with same name that is sethc .
How to do this ?
1 ) Go to C:\Windows\System32\cmd.exe .
Now paste cmd file on desktop and then rename it as sethc
2.) Now Move this file in system32 folder and it will ask " There exists file sethc already . Do you want to replace it ? " Click yes .
Now for xp users this will take place but for vista and win7 users we are not actual administrators . SO FIRST OF ALL FOR VISTA AND WIN7 USERS THAY HAVE TO TAKE OWNERSHIP OF THEIR SYSTEM .
How to take ownership of syatem for win7 and vista users
a ) Go to C;\windows\system32\ . Find sethc file in that folder....
b ) Now right click on sethc file and click properties.
c ) Under SECURITY tab click ADVANCED.. Under OWNER tab click EDIT.
d ) choose OTHER USERS AND GROUPS . then click ADVANCED. click FIND NOW. choose your user account from the list and double click it .
e ) click on ok > Apply > ok
f) Now again go to sethc . Right click it and click on properties.
Under security tab click edit .Choose your user account and check all the boxes under ALLOW attribute.
g ) Bam !! that's it you are the owner. Now you can move and replace sethc with cmd with same name sethc
3 ) now again restart computer then on login screen where it asks password press shift key 5 times . This time Command prompt will open .
write start explorer.exe or simply write explorer and bam you can access admin account.
**************** ENJOY *****************
What is the basic concept behind this ?
We all know that in windows pressing 5 times shift key opens sticky key dialog. This sticky keys dialog is also opened when we are at login page of windows. So the basic concept is that if we press shift keys 5 times and instead of sticky keys dialog , command prompt opens then we can run any command and thus admin is hacked. But to make command prompt appear instead of sticky keys dialog we need guest account . This is called Backdoor .
What is the real story behind all this ?
Actually when we press shift keys 5 times then sethc file is called . So now if we place cmd.exe (command prompt file ) with name sethc in the same folder then when we'll press shift keys 5 times then command prompt will open ( because we have replaced that original sethc with cmd file with same name that is sethc .
How to do this ?
1 ) Go to C:\Windows\System32\cmd.exe . Now paste cmd file on desktop and then rename it as sethc
2.) Now Move this file in system32 folder and it will ask " There exists file sethc already . Do you want to replace it ? " Click yes .
Now for xp users this will take place but for vista and win7 users we are not actual administrators . SO FIRST OF ALL FOR VISTA AND WIN7 USERS THAY HAVE TO TAKE OWNERSHIP OF THEIR SYSTEM .
How to take ownership of syatem for win7 and vista usersa ) Go to C;\windows\system32\ . Find sethc file in that folder....
b ) Now right click on sethc file and click properties.
c ) Under SECURITY tab click ADVANCED.. Under OWNER tab click EDIT.
d ) choose OTHER USERS AND GROUPS . then click ADVANCED. click FIND NOW. choose your user account from the list and double click it .
e ) click on ok > Apply > ok
f) Now again go to sethc . Right click it and click on properties.
Under security tab click edit .Choose your user account and check all the boxes under ALLOW attribute.
g ) Bam !! that's it you are the owner. Now you can move and replace sethc with cmd with same name sethc
3 ) now again restart computer then on login screen where it asks password press shift key 5 times . This time Command prompt will open .
write start explorer.exe or simply write explorer and bam you can access admin account.
**************** ENJOY *****************
Comments