Let’s assume that you have just cracked victim's windows password or simply got access to his windows for some time. Can you make some changes in windows so that you could access the windows again even if victim changes the password?? Or can you make any changes in your own windows so that you could access it anytime even if anybody sets/changes password?
Simply can we set a backdoor in windows?
Yes we can :).
Backdoor actually means maintaining access.
okay lets do one thing first. Open your command prompt (run as administrator in windows 7/vista).
Type the following command: -
Syntax : net user account.name *
Example: net user administrator *
and hit enter. Set any password for that account.
Hopefully your new password must have been set. Did you notice one thing? It didn't ask you to confirm old password. Now suppose if anyhow we manage to access command prompt at logon screen (without logging in), we can easily change/clear password.
Okay let’s move on.
Now press shift key five times and you must have got a dialog box "sticky keys" on screen.
Sticky keys is a feature that makes it easy for users who have physical disabilities to press multiple keys at time. This is the only feature which can be used before logging in at logon screen (as per my knowledge). I repeat this feature can be used at logon screen by pressing shift key five times.
Whenever we start an application like paint, we are actually running mspaint.exe placed in C:\windows\system32 or command prompt, we are running cmd.exe placed in system32 directory, similarly
when we press shift key 5 times or use sticky keys feature, system actually starts the executable file sethc.exe placed in system32 directory. This means if we rename cmd.exe to sethc.exe and press shift 5 times, system would again start sethc.exe but instead of sticky keys the command prompt will be opened.
But you just can’t simply rename it or change system32 files. Follow the tutorial for that.
Tutorial: -
· Go to C:\windows\system32
· Copy cmd.exe on your desktop and rename it to sethc.exe .
· Now copy that file and paste again in system32 directory.
@ Windows XP Users
Hopefully existing original sethc.exe must have been replaced and your job is done. Now press shift five times and you would see command prompt on screen. You can access command prompt at windows logon screen and change/clear the password easily using "net user" command.
Note: You can also do these changes while using windows Guest Account. But when you would access command prompt at logon screen, you can change/clear password even of administrator's account. This is exactly how, we can hack into administrator's account through guest account.
@ Windows vista/7 Users
you must have got a pop up box saying "Access Denied".
Hopefully existing original sethc.exe must have been replaced and your job is done. Now press shift five times and you would see command prompt on screen. You can access command prompt at windows logon screen and change/clear the password easily using "net user" command.
Note: You can also do these changes while using windows Guest Account. But when you would access command prompt at logon screen, you can change/clear password even of administrator's account. This is exactly how, we can hack into administrator's account through guest account.
@ Windows vista/7 Users
you must have got a pop up box saying "Access Denied".
Actually you cannot change system32 directory files until you do not have the permissions. You cannot have the permissions until you do not have the ownership. So let’s take ownership, change permissions, and just follow the steps: -
1. Right click on sethc.exe and run as administrator. Again right click on sethc.exe, open properties. Now, Click on Advanced tab, then on owner and click edit, change the owner from "trusted installer" to "administrator" and click apply.
2. Then click on 'Edit' in security tab to edit permissions. Click on ‘Administrators’, give it full control and apply changes.
Okay it’s done now.
Now try replacing the original sethc.exe with our sethc.exe (got by renaming cmd.exe). Press shift key five times and hopefully you would get command prompt on the screen instead of sticky keys.
Enjoy Command prompt at logon screen...
So do not forget to set this backdoor whenever you would get friend’s laptop for a few minutes... :)
Note: This is illegal and is for educational purpose only. Any loss/damage happening will not be in any way our responsibility.
If you want to keep up-to-date on the Ethical Hacking Tutorials news, latest Tips & Tricks, latest scams & most important awareness and are a member of Facebook, don't forget to Join the Tricks4indya Facebook pageto keep informed about the latest security.
Incoming Search:-
Hack Windows 7 login password
Hack Windows Vista login password
Hack Windows XP login password
Reset Your Windows login password
0 comments:
Post a Comment