+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [TuT]Hack admin password from guest account (/showthread.php?tid=962913)
[TuT]Hack admin password from guest account - Ruyuk - Jan 9, 2011
Ever wanted to hack your college PC with guest account/student or just wanted to hack your friend’s PC to make him gawk when you tell him your success story of hacking? Well,there is a great way of hacking an administrator account from a guest account by which you can reset the administrator password and getting all the privileges an administrator enjoys on windows.. interested? read on…
Concept:
Press shift key 5 times and the sticky key dialog shows up.This works even at the logon screen. But If we replace the sethc.exe which is responsible for the sticky key dialog,with cmd.exe, and then call sethc.exe by pressing shift key 5 times at logon screen,we will get a command prompt with administrator privileges because no user has logged on. From there we can hack the administrator password,even from a guest account.
Prerequisites:
Guest account with write access to system32.
Here is how to do that -
Go to C:/windows/system32
Copy cmd.exe and paste it on desktop Rename cmd.exe to sethc.exe
Copy the new sethc.exe to system 32,when windows asks for overwriting the file,then click yes.
When asked to overwrite,overwrite the sethc.exe Now log ut from your guest account and at the user select window,press shift key 5 times.
Instead of sticky Key confirmation dialog,command prompt with full administrator privileges will open. Now type “ NET USER ADMINISTRATOR aaa” where “aaa” can be any password you like and press enter.
You will see “ The command completed successfully” and then exit the command prompt and login into administrator with your new password.
* Congrats You have hacked admin from guest account.
Further..
Also, you can further create a new user at the command prompt by typing “NET USER ARMAAN/ADD” where “ARMAAN” is the username you would like to add with administrator privileges. Then hide your newly created admin account by -
Go to registry editor and navigating to this key
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserLis t]
Here create a new DWORD value, write its name as the “user name” that u created for your admin account! 🎉🎉🎉
* - Ruyuk - Jan 10, 2011
No one found this TuT useful?
* - the_lol - Jan 10, 2011
So for this to work.. you need to already have acess to the "admin" account on the computer. Nice tutorial.. nice conecept but pretty useless. Thanks for the share though<3.
* - Ruyuk - Jan 10, 2011
(Jan 10, 2011 11:08 PM)the_lol Wrote: So for this to work.. you need to already have acess to the "admin" account on the computer. Nice tutorial.. nice conecept but pretty useless. Thanks for the share though<3.
No, why would you need Admin access int he first place? What would be the point of this lol?
* - the_lol - Jan 10, 2011
Oh nevermind. I didn't understand it at first. Good guide actually. Extremley unique. <3
* - duexx - Jan 11, 2011
i will prolly, try it out later ;)
Thank you for the tutorial
* - Compax - Jan 11, 2011
will se if this works later on ;)
Thanks for the tut ;)
* - WinnieThePooh - Jan 11, 2011
My friends say it works. I'll try this later.
- Thanks mate.
* - twain - Jan 11, 2011
i ve never thought about hacking with sethc.exe, thats pretty cool xD
nice work, thanks dude
* - Reported - Jan 11, 2011
Awesome guide dude, Never saw anything like this before.
I am going to test this now 🙂
* - Ruyuk - Jan 13, 2011
You are all welcome, I hope this helps you especially when you forget your Admin password :)
* - princeofindia - Jan 13, 2011
Nice tut... Will try it someday if needed... :P
* - sonu000a - Jan 14, 2011
not this is not work when i am trying to replace sethc.exe it says "access is denied make sure your disk is write protected".
* - teclas - Jan 17, 2011
Oh, great! Thanks! Going to try it out.
* - T@M3R - Jan 17, 2011
it is a new thing, never heard of it before.
im gonna try it in our school and report back asap
thnx