Friday 25 November 2016

How to Hack into Windows 7 PC w/out password. (Need Windows 7 CD)

If you find yourself forgetting your own password, or trying to get into someone else’s PC for White Hat purposes of course.
Follow these rules.
  1. Make sure to insert the Windows 7 installation CD
  2. Boot from CD. May have to press (F2, Del, or F12 to prompt boot order)
  3. If you press F8 you will see the screen below. Feel free to also just choose “Command Prompt” here as well
4. When you boot from the CD. Click on “Repair Windows” Attempt to boot from a system image. When you press cancel it will prompt the System  Recovery Options. Here you choose Command Prompt
5. Once in the D: directory. Type “cd system32” to specify the folder you want to go into
6. Then type “dir osk.exe” This is the file for the On-Screen Keyboard. (OSK.exe)
7. Type “dir cmd.exe” This is the file for the command prompt. Herein lies the trick
8. Re-name the osk file to osk.old like so. “ren osk.exe osk.exe.old” Press enter
9. Then we’re going to re-name the Command prompt (cmd.exe) to the On-Screen Keyboard (osk.exe) by typing “ren cmd.exe osk.exe”
10. Now Reboot the PC. Return to the Windows 7 login screen
11. You’ll notice a Ease of Access option in the lower left at the login screen
12. Click on it and Check off the “On-Screen Keyboard”
13. Once you do, the Command Prompt will appear.
14. Except this command prompt has “ADMINISTRATOR” rights. Type in “whoami” just for verification
15. You can change the password with these commands “net user (username) (password)”
16. Once changed, simply log in with the new password.
17. From this point on, everytime you log in Command Prompt will appear on the screen
18. Remember that we re-named the On-Screen Keyboard and Command Prompt. So if you want to run, “cmd” it will not work. You will have to type “osk” and Command Prompt will appear
19. HOWEVER. If a SECURITY PATH is run on the PC, it will remove command prompt all together and return the on-screen keyboard. The way to fix this is to locate the Win 7 CD, and copy the cmd file from the X: drive that appears, to the D: drive. Overwrite the file, and Command Prompt will go back to normal as cmd.exe
Command is “copy X:windowssystem32cmd.exe d:windowssystem32

No comments:

Post a Comment