Windows User Account Escalation Hack
By Deane Barker on August 2, 2006
Liquid Web Project Streamer – r0t0r00t3r: For the record, this hack works exactly as they display here. Anyone can effectively open a Windows shell (explorer.exe) as the SYSTEM account. I don’t know the specifics of what this allows you to do, but it sure looks scary.
This could probably come in handy if I ever lost the admin password for a machine. But can it really be this simple?
(Warning: Embedded video, profane soundtrack. Fred Durst hates you, man)
Wow, that really is scary.
Have you actually /tried/ that on a fully patched windows xp box with a normal user account (hint, I have)
Yes. Twice. My box is XP Pro, SP2 and Windows Update just ran two or three days ago.
It works as advertised.
I just tried it from a normal Windows users account and got “Access Denied”. Deane, did you run it from a User account or an Administrator account?
There’s lots of interesting discussion about this on MetaFilter and Ask MetaFilter. Definitely worth a read.
As Matt pointed out above, this very well may have worked for me because I was a local admin to start with. Never thought of that.
I JUST WANT TO LEARN TO HACK A WINDOWS XP PROFESSIONAL IF YOU KNOW ABOUT IT E-MAIL ME AT oot_bhoot.yahoo.com
are you maiddddddddddd
how to hack a site if you know e-mail me at oot_bhoot.yahoo.com
This only works on a limited account if the admin hasn’t disabled task sched..
i switch off my AT process anyway so..
Please let me know where is hack. I donot see it.
Please help!
yeh my prick of a brother must have got this shit and hacks into my pc… so with my handy ol’ tower with a nice lock i prevent him from getting on and breaking it like he does with everything else…
I can’t even find the damn hack. Either I’m blind or it’s stupidly placed.
explorer.exe is effective only in FAT32 not in NTFS format
Shyam Pratapgarh U.P