+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: How can I get administrator permissions on these public computers? (/showthread.php?tid=6227877)
How can I get administrator permissions on these public computers? - slezer - Nov 18, 2022
Hello, I am currently trying to spread a silent Monero miner of mine, and I want to infect my local library's computers. The computers used to have no admin password but they recently added one. I'm asking how I can get admin permissions, or atleast just run my silent miner installer, which requires admin permissions on the computer. I have physical access to the computers.
I thought I could maybe use a windows recovery USB drive to try and reset the computer and create an admin account from there, though I doubt this would be possible. I thought I could try enabling RDP on the computers while being there physically and do the work from my home.
Those are just ideas, if anyone knows how I can accomplish this, let me know.
RE: How can I get administrator permissions on these public computers? - DramaKing - Nov 18, 2022
(Nov 18, 2022 10:18 AM)wnet Wrote: Hello, I am currently trying to spread a silent Monero miner of mine, and I want to infect my local library's computers. The computers used to have no admin password but they recently added one. I'm asking how I can get admin permissions, or atleast just run my silent miner installer, which requires admin permissions on the computer. I have physical access to the computers.
I thought I could maybe use a windows recovery USB drive to try and reset the computer and create an admin account from there, though I doubt this would be possible. I thought I could try enabling RDP on the computers while being there physically and do the work from my home.
Those are just ideas, if anyone knows how I can accomplish this, let me know.
RDP is a Pro feature, and even if the computers run a Pro version, of course enabling it requires an administrator. If Secure Boot is disabled (fat chance), there is no BIOS password or BitLocker, you can try a bootable OS to scrape the hashes in the SAM registry hive and crack them. Or you can try privilege escalation as outlined here: https://www.absolomb.com/2018-01-26-Windows-Privilege-Escalation-Guide.
Do not try a clean install as this will raise red flags VERY quickly, and you will probably get busted before you can finish. Also, there is probably some "Deep Freeze-like" software running to keep patrons from messing up the computers.