How to Hack a Windows 7 Admin Account Password with Windows
Magnifier
Greetings. This how-to on hacking Windows 7 admin account
passwords using Windows Magnifier is focused on adding, changing, or deleting
an admin level account on a Windows 7 box.
Prerequisites:
- Any Linux Live CD/DVD (ex. Ubuntu Live, Linux Live, Kali, etc.)
- Ability to use said Linux CD/DVD.
- Basic understanding of Windows files structure. i.e. can navigate.
- The desire to modify user account(s) on said Windows box.
- Physical access to said Windows box.
- Ability to use command line and basic understanding of net user commands
Things to Note:
• If
you are trying to hack a spouse's account, you are screwed because they won’t
be able to use the old password anymore—try explaining that.
• This
hack works on Windows 7, 8, Server 2008, and basically any that have ease of access. Servers require "net user Administrator blabla /domain".
• This
will destroy all data encrypted with EFS on the account if it's enabled (you
have to enable it first).
• If
you do not undo the hack after you change the password, you will get the magnifier every time you use cmd or nothing at all.
• If
you modify or delete any other files in Sys32, your next boot up is doomed (maybe).
• Scared?
You should be. Now let's go.
Step 1: Boot Some Flavor of Linux
Live CD
Insert CD/DVD into drive and reboot
the machine. Start your Live DVD. You may need to go into the BIOS screen and
change the boot-up order to CD/DVD drive first, HDD second.
Step 2: Navigate to Sys32
Use the file browser in your Linux
environment, navigate to%windir%/system32/. You may have to right-click and
mount the Windows partition/drive first or use the NTFS-3G command.
Step 3: Rename Magnify.exe
Find and rename magnify.exe
(Magnifier file) to magnify.old.
Step 4: Rename cmd.exe
Find and rename cmd.exe to
magnify.exe.
Step 5: Shut Down Linux &
Reboot Windows
Logout, remove DVD, and reboot into
Windows.
Step 6: Get CMD Prompt Modify
Accounts
When Windows reboots, click on the
ease of access button in the bottom left corner. Click magnifies and hit apply.
Ta da. You have a system level command prompt.
Tip: You can right-click on cmd.exe and click run as administrator
inside of Windows for escalated privileges. To edit files, it would never be
allowed at basic admin level (caution)
As the photo above shows, type net user to get a
list of accounts.
Your Options (Choose One That Applies):
Change Password:
net user username new_password
When you do so, the password changes without prompting you again.
net user username new_password
When you do so, the password changes without prompting you again.
Add an account:
net user username password /add
net user username password /add
Tip: If your username has a space, like John Doe, use quotes like "John Doe".
Admin that:
net localgroup administrators username /add
net localgroup administrators username /add
Delete that:
net user username /delete
net user username /delete
Remote Desktop Users Group: (just in case)
net localgroup Remote Desktop Users User Login Name /add
net localgroup Remote Desktop Users User Login Name /add
Domain i.e. Servers:
Net User Syntax:
net user commands Reference
net user commands Reference
Step 7: Reboot Linux & Fix magnfiy.exe
Now you should insert your Linux Live CD/DVD and rename the
files back to original names or you will have issues later.
- Repeat Step 1
- Repeat Step 2
- Rename magnify.exe back to cmd.exe
- Rename magnify.old back to magnify.exe
- Log out, take out CD/DVD, reboot into Windows
Well, that was how you hack a Windows 7 admin account
password with Windows Magnifier. Hope it helps you in some way.
------------------------------------------------- Thanks---------------------------------------------------------------
Post a Comment