Windows User Account Escalation Hack

By Deane Barker on August 2, 2006

Liquid Web Project Streamer – r0t0r00t3r: For the record, this hack works exactly as they display here. Anyone can effectively open a Windows shell (explorer.exe) as the SYSTEM account. I don’t know the specifics of what this allows you to do, but it sure looks scary.

This could probably come in handy if I ever lost the admin password for a machine. But can it really be this simple?

(Warning: Embedded video, profane soundtrack. Fred Durst hates you, man)



  1. Have you actually /tried/ that on a fully patched windows xp box with a normal user account (hint, I have)

  2. I just tried it from a normal Windows users account and got “Access Denied”. Deane, did you run it from a User account or an Administrator account?

  3. As Matt pointed out above, this very well may have worked for me because I was a local admin to start with. Never thought of that.

  4. yeh my prick of a brother must have got this shit and hacks into my pc… so with my handy ol’ tower with a nice lock i prevent him from getting on and breaking it like he does with everything else…

Comments are closed. If you have something you really want to say, email and we‘ll get it added for you.