Gain admin access on windows system using your guest account. Hello All,Ever thought of how to get into your friends system and see the access denied files and folders Or ever wanted to hack into someones admin account Well here is a method which exploits yet another windows bug. Have you ever noticed that if you press your systems SHIFT key 5 times continuously a pop up windows occurs with the name Sticky Keys If it doesnt pop up on your comp, then may be your shortcut is turned off. For enabling it, goto Control. Panel Accessibility Options. In the accessibility options under thekeyboard tab, in sticky keys, click on settings and enable theshortcut for sticky keys. And u can do this even with a guest account. Finally if the following 2 requirements are setup on your system, then you are all set to enter into your admins account. On Pressing SHIFT 5 times, a pop up should appear. The windows System. Windows Xp The Wolf Editions on this page. Concept When u press, the SHIFT key 5 times, a file with the name sethc. You can verify this in TASK manager dont close the pop upwindow. This file is located in C WINDOWSsystem. The Vulnerability. When SHIFT key is pressed 5 times, windows executes a file namedsethc. It doesnt even check if its thesame file. Also it runs with the privilege of the CURRENT USERwhich is executing the file i. TASK manager under processes, it shows your user name as guest. The file executes even if u log off, and have the windows login screen isshowed up, BUT THIS TIME SINCE NO USER HAS LOGGED IN IT RUNS WITHSYSTEM PRIVILEGE. Exploitation. If u understand this much, then the exploitation is very simple for you. What we will do is that,we pick cmd. Windows will ask, that another file exists, do u want toreplace and after pressing OK, you have replaced the sethc. Now if u press SHIFT key 5 times, a command prompt willpop up. Finally. Now log off or restart. When you reach the windowslogin screen, press the shift key 5 times. A command prompt willpop up with SYSTEM privilege. Enter the normal commands as follows net user username addnet user localgroup administrators username add. And a new user called username with admin privilege will be added. And thats it, you have admin privilege of the system and you can do what ever you want to with it. Hiding your fake admin profile. Now you surely dont want the real admin to track you. Here is what you will have to do to hide yourself from login screens as well as from control panel. Goto registry editor and open this place. HKEYLOCALMACHINESOFTWAREMicrosoft. Windows NTCurrent. Version. Winlogon. Special. Accounts. User. ListHere create a new DWORD value, write its name as the user name that u created for your admin account. Thats it now you are invisible but still admin of the system. Live as admin forever and keep screwing the real admin forever. Stop-Your-PC-from-Forward-Deleting-Text-as-You-Type-Step-2.jpg/aid6644130-v4-728px-Stop-Your-PC-from-Forward-Deleting-Text-as-You-Type-Step-2.jpg' alt='Microsoft Access Turn Off Overwrite On Keyboard' title='Microsoft Access Turn Off Overwrite On Keyboard' />Last but not the least IMPORTANTWindows has two type of login screens Where the accounts are listed with some pictures. Where u have to write username and password. After making the hidden account u will have to login through the 2nd step only. Stop-Your-PC-from-Forward-Deleting-Text-as-You-Type-Step-1.jpg/aid6644130-v4-728px-Stop-Your-PC-from-Forward-Deleting-Text-as-You-Type-Step-1.jpg' alt='Microsoft Access Turn Off Overwrite On Keyboard' title='Microsoft Access Turn Off Overwrite On Keyboard' />If ur login screen is of Type 1, press ALT CTRL DEL twice to get the 2nd type screen. Thats it NOTE This is a sureshot way to gain admin, if u r a lamer or a newbiethen please do some googling. I have written almost every detail. Thanks for reading this far Make a comment if you liked this one. Thanks for digging and shouting it out to your friends. The future of Windows Microsoft Windows Core OS aims to turn Windows 10 into a modular platform for the future. By Zac Bowden Friday, Sep 29, 2017 at 800 am EDT. The BitLocker FAQ for Windows 7 contains information about general BitLocker use and system requirements, upgrading, deployment, administration, key. Article ID Article Title. FD40841 Customer Service Note Advanced Services Dashboard FD40849 Technical Note FortiPortal troubleshooting commands. Harden Windows 10 A Security Guide gives detailed instructions on how to secure Windows 10 machines and prevent it from being compromised. We will harden the system. SubInACL is a commandline tool that enables administrators to obtain security information about files, registry keys, and services, and transfer this. A very common scam has people supposedly from Microsoft or your ISP or other authorities calling to help you with computer problems. Dont fall for it. Associate your Partner Center with rhipe as your Indirect Provider. Raising a Partner Support case with Microsoft. Renewing your MPN with Microsoft.