K’~EXkurogane~’s Blog

I wrote this copied and simplified this post from a blogger who posted something interesting and useful for the fact the college/university’s admin had many restrictions imposed on PC uses in the cybercafe or library’s PCs, and you might need it to fight certain selfish senior students who impose their own restrictions on a PC and set their own passwords for their own benefits. No additional softwares needed.

Have you ever been so eager to hack your college pc with a guest account/student account so that you can download with full speed, unblock websites and use a ‘normal computer’ ?  Well, there is a great way of hacking an administrator account from a guest account by resetting the administrator password and getting all the priviledges an administrator enjoys on windows..

If you are interested, read on…

Concept

Press shift key 5 times and the sticky key dialog shows up.This works even at the logon screen. But If we replace the sethc.exe which is responsible for the sticky key dialog,with cmd.exe, and then call sethc.exe by pressing shift key 5 times at logon screen,we will get a command prompt with administrator privilages because no user has logged on. From there we can hack the administrator password,even from a guest account.

You’ll need a guest account with write access to system 32.

1. Go to C:/windows/system32

2. Copy cmd.exe and paste it on desktop

3. Rename cmd.exe to sethc.exe

4. Copy the new sethc.exe to system 32, when windows asks for overiting the file click yes.

5. Now Log out from your guest account and at the user select window,press shift key 5 times.

6. Instead of Sticky Key confirmation dialog,command prompt with full administrator priviledges will open. 

7. Now type “ NET USER ADMINISTRATOR aaa” where “aaa” can be any password you like.

8. You will see “ The Command completed successfully” and then exit the command prompt and login into administrator with your new password

Congrats You have hacked admin from guest account.

Also, you can further create a new user at the command prompt by typing “NET USER WXYZ /ADD” where “WXYZ” is the username you would like to add with

1. Go to registry editor and navigate to this key

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList]

2. Here create a new DWORD value, write its name as the “user name” that you created for your admin account and live with your admin account forever
 

This is purely for educational purposes only and i am not responsible for any misuse of this tactic, especially for malicous purposes. I won’t be posting ways on how to hack a school server network and shut down the school’s server or gaining control over the whole network because the probability of getting caught is high. If you are trying to hack a password and login into someone’s account in myspace, friendster, facebook, msn, yahoo. google etc, there are 2 ways: using a programme (i don;t recommend it because while you found a suitable software and downloading it online, you’ll get infected and hacked first.), the second way is manually (though you’ll need certain webpages to help, and create a e-mail address and social website page with fake info so that you won’t be recognised) without additional softwares. I won’t be posting this either because people misuse it to spread viruses instead, while i use it to make fun of my friends by altering their personal details into funny stuff in a social website after logging in their page. Try to ask if you want to learn this, but i will probably only reply to my close friend that i trust.

I wish this post helps those eager to learn. Peace, and good luck.

~ by ks-strikefreedomx20a on February 13, 2009.