Aug 5, 2024 02:18 AM
(This post was last modified: Aug 5, 2024 11:31 AM by Centsicles.)
(Aug 4, 2024 01:52 PM)DramaKing Wrote: Run 'whoami' in the Command Prompt. If it prints anything but 'NT Authority\SYSTEM,' you don't. C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Ngc is locked while the system is running and requires the highest privileges. Even Invoke-NinjaCopy and vssadmin require admin privileges. Expect that you will need a series of techniques.
it just says johnscomputer\john (and yes my name is john) so im guessing i dont have it.
(Aug 4, 2024 04:17 PM)Byte Wizard Wrote: No you can just download RunAsSystem or elevate a cmd shell yourself and then you get access to it
As to the contents being locked I got no idea
i really dont know what to do here.
(Aug 4, 2024 09:20 AM)DramaKing Wrote: If you have access to the system directories, you can use it to get the PINs for users.
helloooo?
(Aug 6, 2024 02:38 AM)Centsicles Wrote: helloooo?
Don't get pushy. It's going to be up to someone else to weigh in. Any other help that I could give would be doing it myself, and I don't think you want that. I've already done a lot for you.
(Aug 6, 2024 04:14 AM)DramaKing Wrote: Don't get pushy. It's going to be up to someone else to weigh in. Any other help that I could give would be doing it myself, and I don't think you want that. I've already done a lot for you.
your right i guess.Seemed a bit odd you take a few more hours then you usually do,but thinking back on it maybe you were busy.
(Aug 6, 2024 04:14 AM)DramaKing Wrote: Don't get pushy. It's going to be up to someone else to weigh in. Any other help that I could give would be doing it myself, and I don't think you want that. I've already done a lot for you.
Its been a week without any response,im sorry if i was being a bit pushy,can you please continue helping me?
(Aug 13, 2024 12:31 PM)Centsicles Wrote: Its been a week without any response,im sorry if i was being a bit pushy,can you please continue helping me?
I've given you what I got. From here it will be running scripts, checking for privesc vulnerabilities, trying exploits, injecting code, etc. These are things that you could learn from the materials I provided. I might be able to do it if I had the computer in front of me, but I've done the best that I can through this forum. Maybe someone else has something more, but everyone else seems to have given up also.
(Aug 13, 2024 12:46 PM)DramaKing Wrote: I've given you what I got. From here it will be running scripts, checking for privesc vulnerabilities, trying exploits, injecting code, etc. These are things that you could learn from the materials I provided. I might be able to do it if I had the computer in front of me, but I've done the best that I can through this forum. Maybe someone else has something more, but everyone else seems to have given up also.
i mean is there a way to theoretically get my dad's hotmail password,since that is the one he uses for administrator.
Aug 14, 2024 08:10 AM
(This post was last modified: Aug 14, 2024 08:53 AM by DramaKing.)
(Aug 14, 2024 08:03 AM)Centsicles Wrote: i mean is there a way to theoretically get my dad's hotmail password,since that is the one he uses for administrator.
Without admin?
At your age, don't try this: https://github.com/EricksonAtHome/blackeye. Didn't even work for another new member who tried it on Windows. A keylogger would do it, but the antivirus would surely quarantine and log it.
Aug 14, 2024 08:18 AM
(This post was last modified: Aug 14, 2024 08:22 AM by ttbr0.)
what is your windows version and os build? you should be able to see it in your settings under about
Aug 15, 2024 12:42 PM
(This post was last modified: Aug 15, 2024 12:43 PM by Centsicles.)
(Aug 14, 2024 08:10 AM)DramaKing Wrote: Without admin?
At your age, don't try this: https://github.com/EricksonAtHome/blackeye. Didn't even work for another new member who tried it on Windows. A keylogger would do it, but the antivirus would surely quarantine and log it.
luckily enough,somebody made a keylogger in python,but the keylogger doesnt work when uac is active.Anyway so lets say THEORETICALLY i just use that github tool and maybe somebody on here read my post,is it possible i could get in trouble,and no,it didnt get flagged by my antivirus,just for educational purposes can you tell me the steps on how to download it?
(Aug 14, 2024 08:18 AM)ttbr0 Wrote: what is your windows version and os build? you should be able to see it in your settings under about
on windows 11, my os build is os build 22631.3958
Aug 15, 2024 12:56 PM
(This post was last modified: Aug 15, 2024 12:57 PM by DramaKing.)
(Aug 15, 2024 12:42 PM)Centsicles Wrote: luckily enough,somebody made a keylogger in python,but the keylogger doesnt work when uac is active.Anyway so lets say THEORETICALLY i just use that github tool and maybe somebody on here read my post,is it possible i could get in trouble,and no,it didnt get flagged by my antivirus,just for educational purposes can you tell me the steps on how to download it?
You can either clone the repository with git or click on 'Code' and then 'Download ZIP.' Since it's a shell script, it won't run in Windows without some kind of virtualization or emulation. It would run in Termux for Android. And if your dad realizes that the Microsoft login page is actually a phishing page, you could be in some trouble. I am not recommending this.
(Aug 15, 2024 12:42 PM)Centsicles Wrote: on windows 11, my os build is os build 22631.3958
Welp, at least we've ruled out known vulnerabilities.
(Aug 15, 2024 12:56 PM)DramaKing Wrote: You can either clone the repository with git or click on 'Code' and then 'Download ZIP.' Since it's a shell script, it won't run in Windows without some kind of virtualization or emulation. It would run in Termux for Android. And if your dad realizes that the Microsoft login page is actually a phishing page, you could be in some trouble. I am not recommending this.
Welp, at least we've ruled out known vulnerabilities.
So my dad would have to put in his credentails for this?
(Aug 16, 2024 01:42 AM)Centsicles Wrote: So my dad would have to put in his credentails for this?
He would have to login to the blackeye page like it was the real Microsoft login, yes.
(Aug 16, 2024 04:20 AM)DramaKing Wrote: He would have to login to the blackeye page like it was the real Microsoft login, yes.
yeah...maybe we shouldn't do that,my dad is 200% percent not doing that lol,i mean is there any way to create a fake uac,he'll believe a uac for sure,but he would definitely be super suspicious about logging into his hotmail using mine,any other ideas?
(Aug 16, 2024 11:02 AM)Centsicles Wrote: yeah...maybe we shouldn't do that,my dad is 200% percent not doing that lol,i mean is there any way to create a fake uac,he'll believe a uac for sure,but he would definitely be super suspicious about logging into his hotmail using mine,any other ideas?
Never heard of UAC phishing. He'd be really suspicious if a UAC prompt asked him for his password on his administrator account.
|
