Get full access to a Windows system without administrator password

Hi Guys, As in my last post I show you hot to crack Windows login password. But what if we do not need to crack password to access a victims's system with administrator privilege. This process is same as to crack Windows password but there is a little bit difference in last.

Get full access to a Windows system without administrator password using Stick Keys

Stick keys is a feature of Microsoft Windows which provide to move cursor  on screen without mouse or touch pad. This feature is also available when the system is locked. Since pressing Shift key five times opens Stick Keys dialog box. Means when we press Shift key five times then it call a application (which is Stick Keys Dialog ). So we just have to change this application with our desire application i.e. command prompt.

  Now lets come to the point. As we all very well know that by using a bootable pen drive of Linux we can get complete access to a any machine . But  this method is very time consuming (You have to download Linux ISO file and then need a third party application to make bootable pen drive).

Get full access to a Windows system without administrator password using Windows installation disk

Step 1:

 Insert your Windows installation media ( That may be pen drive or CD/DVD).

Step 2: 

Boot from your installation media. (In mostly system F12 is used to select bootable disk )

Step 3:

When the Windows installation dialog open press Alt+F10. A command prompt window will open.

Step 4: 

Type the following commands in that window.

•  Type 'C:' and press Enter

Note:

In most systems the installed Windows drive is denoted as C but if C is not the installed Windows drive then you have to try all letters form C to Z to find out the correct drive.

 You can check that whether the C is installed Windows drive or not by using following procedure.

Procedure to find correct drive

Type 'dir' and press Enter. You will get the list of all files and folders in that drive. If the following directories are present in that drive then it is correct drive otherwise try this step with other drive letters.

1. Windows

2. Program Files

3. Users

  . 

Now when you get correct drive then

•  Type 'cd Windows\System32' and press Enter 
•  Type 'ren sethc.exe sethc.exe.old' and press Enter
•  Type 'copy cmd.exe sethc.exe' and press Enter

Step 5: 

All set now close that window and cancel the installation process and restart the system.

Step 6:

When login screen appears then press Shift Key 5 times and you will get command prompt window. In that window type following commands.

•  Type 'notepad' and Press Enter. You will get Notepad window.
• Now press Ctrl+O and File Explorer will open and you can access whatever you want.

Note :

The above content on this blog is only for educational purposes. The author is not responsible of any activity either harmful or malicious due to this content.

  Thanks :-)