Breaking Into A Windows XP Installation

CaptainRon

Jan 9 2006, 08:21 PM

Usually a Windows XP installation is done on a NTFS partition but at times you will find fools who install it on FAT32 partition and have no idea that they could create a Limited user account for normal using and then go about complaining that Windows is insecure to the brim.

Anyway here we only need the Windows XP/Server 2003 to be installed on a FAT32 partition.

There are three simple steps involved:

• Rename the logon.scr file situated in system32 folder to something else. Then make a copy of the cmd.exe and name it logon.scr .
• Restart the computer, wait on the logon screen for the renamed cmd.exe to fire up as logon.scr . Usually the time taken will be the time the admin set as the screen saver time. Usually 10 mins, and then you get a console window in front of you with all the admin powers.
• Make a useful command. Best thing to do is run the explorer.exe command and wait for the GUI shell to load. Now you can perform normal computer operations. Another good thing that can be done is to change the Administrator password with the NET command on the command line itself.

Now we will see how to do the first step in more detail. This can be achieved if u have a simple account or else use a boot disk and from command line you can perform the operation. Or else use a Linux installation to do it. Its always helpful to have a Linux live CD in hand. Else you can use the parallel Win 98 installation to do it (if available).
I will elaborate the boot disk method. Most people will be having a Win 98 boot disk or a CD. Boot from it and reach the command line. Suppose Win XP is installed on C:\ then do the following:
• A:\> C:\ 
• C:\> CD Windows\SYSTEM32 
• C:\Windows\System32> REN logon.scr logon1.scr 
• C:\Windows\System32> COPY cmd.exe logon.scr 
• CTRL+ALT+DELETE (Restart the comp, remove the bootable media)

Let see what happens in the second step. You need to do nothing in this step. You just need to sit and wait without pressing any key or moving the mouse for the screen saver to fire up. In this case logon.scr fires up. Logon.scr is nothing but a renamed cmd.exe .
A command line shall appear after the set time expires.

Now for the hacking step, we have a full powered command line in hand. Now we can do whatever we wish. Lets do one thing first; make sure that we have a long term access to the computer. We will change the administrator password. Type the commad:

NET USER Administrator <pass of ur choice> ¿

Very seldom does even a admin log in with the administrator account. So now you have the administrator account in your hand and not many can do anything about it.

Supposing the computer is usually used frequently with the admin account, you can simply type the ‘explorer’ command at the shell to call the GUI shell. You get a full power shell in your hand. This is very safe since one will realize that anyone ever hacked their comp. But this will require you to wait for the command line to fire up as a screensaver every time.

Anyhow, now you can hack comps of many FAT32 fools.

twitch

Feb 14 2006, 09:42 AM

All I did was use Norton (i know don't slag me) BootMagic and PartitionMagic to create my partitions, then I added XP and 98SE. XP installed on a FAT32, without changing it to NTFS. Strange, I know. But I didn't like XP, so I back-tracked to Win2K.

Great tutorial though, for those that don't have the delights of Norton. LMFAO.

abhiram

Feb 14 2006, 11:54 AM

Nice info ... especially the part about renaming cmd.exe to logon.scr. I think this will come in handy some time

. Great tutorial.

Logan Deathbringer

Apr 2 2006, 09:50 PM

yes a very useful tutorial. Although I myself like to use ERD Commander if I have access to a cd-rom drive as a bootalbe source. Its a very handy tool if you have access to it.

XIII

Apr 2 2006, 10:20 PM

It's really very useful tutorial, i hope we can get a lot of tutorials like this one, not the same category "Hacking" but i mean the same quality as this one.
I have some questions:
Why can't we do these steps to a computer uses NTFS file system?, is there something prevents that?, can these steps done remotly?, will it has the same effect?, if so could it be done from linux remotly to change another windows pc adminstartor password?

Logan Deathbringer

Apr 3 2006, 10:45 PM

QUOTE(XIII @ Apr 2 2006, 03:20 PM)

This method requires the ability to use windows 98 as a "shell" from what I've read. The problem is that Win '98 can't "address" a NTFS drive or install onto it. If you have the need to get into a winxp pro/home install that uses a NTFS drive then you will have to use a different method if you don't have direct access to a valid account due to a forgott'n password or whatever. For that I would definetly suggest a copy of Winternal ERD Commander....hehe....if you can get a copy of it that is, and you can get the machine your trying to work on to boot from the CD-ROM drive.

XIII

Apr 3 2006, 11:50 PM

QUOTE(Logan Deathbringer @ Apr 4 2006, 07:45 AM)

as i got it, if you have a limited account on a winxp then you don't have even to boot from a cd rom or a floppy or anything else, so the question if you have a limited account could you make it on NTFS file system or it can't be done on NTFS?, also the other questions waiting for reply

Logan Deathbringer

Apr 4 2006, 01:00 AM

Why can't we do these steps to a computer uses NTFS file system?

Windows '98 can not read a NTFS partion.

is there something prevents that?

see answer above

can these steps done remotly?

I don't beleive so

will it has the same effect?

if you can figure out how to do it remotely possibly

if so could it be done from linux remotly to change another windows pc adminstartor password?

there are otherways to remotely access a winXP system and change admin passwords.....hehehe

Recent Queries:-

breaking win login - 9.67 hr back. (2)
breaking into winxp without password - 10.84 hr back. (1)
breaking into admin account xp pro - 33.81 hr back. (1)
break windows xp logon code - 36.54 hr back. (1)
software for breaking windows xp administrator password - 41.31 hr back. (1)
winxp remotely delete ntfs partition - 46.47 hr back. (1)
force xp installer to rename partition to c - 49.22 hr back. (2)
breaking into a limited windows account via a windows admin account - 51.30 hr back. (1)
winternal pc tech disk download - 54.75 hr back. (1)
breaking into a pc password - 57.16 hr back. (1)
break into xp computer - 65.81 hr back. (1)
how to change winxp setup look - 107.29 hr back. (1)
software for breaking win xp password - 118.56 hr back. (1)
breaking into windows xp - 131.51 hr back. (1)

Similar Topics

Keywords : Breaking Windows Xp Installation Exploiting Fat32 Partition

How To Make Your Windows Look Like A Mac - Windows Xp only (24)
Ok Fans of macs I have done my reserch and checked it twice and I now present my tutorial on how to
make your windows XP desktop look like a Mac operating system. For those who think its really hard
your wrong and without any more jiber jaber lets get started. Step 1: The Downloads Ok for this
to work your going to need some items to make it work. The first one is the skin to make your
windows look like a mac. Its called Panther you can download it here . Second your gonna need a doc
for your programs. The best free one out there is Yz's dock and you can download...

How To Change Your Windows User Environment Variables - a step-by-step guideline (5)

1. INTRODUCTION. Most of Microsoft very basic users are satisfied when the Windows installer
installs each new software, automatically putting each file in the right place and making each
Windows registry change. However, some new incoming software environment, mainly the ones from the
open world, let you do some changes manually. For instance, if you install the java development
software on your pc, you have to manually tell windows where the java binaries are. That means, if
you type “javac” in a command shell window, Microsoft Windows has to know that javac.ex...

How To Enable User Login Security On Windows Vista - NOT User Account Control (0)

Repairing Your Windows Environment - (0)

You have already seen people fully desperate because their Windows system cannot boot. Of course,
they could bring their PC back to the shop and ask for a complete re-install, but they will loose
their data. There is a way avoiding that. Of course they will still have to go back to the shop and
have the thing repaired. But they can, before that, save their files. There are Windows LiveCD
distros, you can boot on a CD which has an embedded Windows. Because you boot off the CD-rom, the
hard disk is not embedded. And as you boot off a CD, there is no virus problem, at least...

How To Add Administrator Account In Logon Screen - Windows XP (4)

If you've created an account in addition to the Administrator account in Windows XP, the
administrator account will not be shown in the Logon Scree, this tutorial explains you how to add
the Administrator account to the logon screen. If you are using Windows XP Pro follow these steps,
1. In the Start Menu, select Run. 2. In the Run dialog, type 'regedit' without quotes, to
start the registry editor. 3. Navigate to the key, HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \
Windows NT \ CurrentVersion \Winlogon \SpecialAccounts \UserList 4. In the right pane, ri...

Avoid Flash Disk Viruses - This ruins a lot of Windows PC! (14)

There are this new hype of virus scattering around nowadays that ruins a lot of PCs in our country;
in schools and public cafes! Its bad since it disables a lot of features as well as it ruins memory
the slows down the whole thing. It disables much of the removal process like Windows RegEdit.exe,
MsConfig.exe and also TaskMan.exe. Variations of these also disables your keyboard during normal
booting, floods your disk with virus files in the root directory and also the windows directory and
some also floods your directory with Folder looking icons that is an executable.. ...

Speed up your windows and Pc! - (21)

Speed up your windows and Pc! Right click on " My Computer" and select " Properties" . Go to "
Performance" and click on " File System". In "Settings" section change " Desk Top Computer" to "
Network Server" For speed up your windows: Run " Registry Editor", and go to below address :
HKEY_CURRENT_URER\Control Panel\Desk Top Add a parameter : (String Value)(REG_SZ) (value data =0
),and name it "MenuShow Delay"...

How To Setup Parental Controls In Windows Vista - (5)

How to Setup parental controls in windows Vista Parental controls are a great first step to
keeping children safe online. To configure Parental Controls your computer must be set up with at
least one password-protected administrator user account. To Set up parental controls 1- Log in
to a user account that has administrative privileges. 2- Click the Start button, choose Control
Panel, and click Set up parental controls for any user. 3- You come to a page that shows the name
and picture for each user account you’ve created Click the user account for which you want...

Adding East Asian Fonts To Your System - For Windows XP (4)

While trying to show someone the mysterious symbols used to create "The Matrix" source code, I
realized that most people have no need to use the East Asian input services offered in Windows XP
but they still may want to know how to play with the options. Additionally, there may be many
Eur-Asian people throughout the world that don't know that they can use their native language
when sending emails to their families abroad;. Or even type letters in their native script. Well,
in an effort to increase the public knowledge of this service, I decided to write this tuto...

Reformatting Your Computer (windows Xp) - Format your Computer/PC/Harddrive and Install Windows (10)

Many of us, during the course of computer's life will need to reformat our computer for various
reasons. Whether it be your computer is so slow and you just can't figure out why, or if you
have a very persistent virus that you just can't figure out a way to eradicate. Though i'm
sure there are countless number of reasons, many will fall on the solution of reformatting your
computer....or more specifically, your hard-drive. Now what exactly does this involve? To put it
simply, reformatting your hard-drive is like reformatting any other disk like a floppy d...

Remote Desktop Connection In Windows Vista - (0)

Remote Desktop Connection in Windows Vista What is Remote Desktop ? Remote Desktop Connections
can save time and aggravation: It's a technology already installed in Windows Vista that lets
you sit at a computer in one place and connect to another computer in a completely different
physical location away from you. For example, you can leave programs running on your computer at
work and then see them the same way you do at work when you turn on your computer at home. You can
be miles away from the work computer but be working on it as if you had never left the off...

Installing Windows Vista Rtm With Boot Camp - (4)

I guess I'm a few months late on this Vista RTM thing... I'm writing this because I've
gotten sick of the Mac OS. It's just too unnatural for me to use. But, for those of you who have
been afraid to install Windows Vista RTM on your Macs using Boot Camp, this tutorial should help you
and give you confidence. wifi, Aero, and installation work automatically. Two-finger scrolling
works. iSight is actually functional (you can use it). Part 1: Installing Vista To install
Windows Vista on your Mac, you'll need... (Guess.) A Windows Vista DVD and an ...

Stream Lining Windows - (1)

Here's a few quick hacks/registry changes that will help you improve the terribly bloated and
mind-numbing thing we call XPand hopefully I'll got some good credits out of this to. This
tutorial is VERY detailed so it should be easy to follow and sorry if there is spelling mistakes.
MAKE SURE YOU BACK UP YOUR REGISTRY BEFORE YOU TRY ANY OF THESE. I also take no responsibility if
you are an idoit and dont back it up or if you do any harm to your computer!! Improved context
menu: HKEY_CLASSES_ROOT\AllFileSysytemObjects\shellex\ContextMenuHandlers New key called "Co...

Windows Xp & 2003 Performace And Security Part One - (2)

Last week I promised to release my very first tutorial on AstaHOST regarding basic computer
security. Why is computer security important? For starters, ask yourselves the following question.
Can you really risk losing your personal data, including memorable pictures, videos, documents, and
important projects that are currently being developed by you? That is up to you to answer, yet I
know that most computer users don’t have instant backup solutions that keep data safe, even if
Windows is dead. The following tutorial will guide the average user on how to easily tweak h...

Ways To Improve Your Performance In Windows XP - (23)

There are many ways for us to improve our computer performance when we're using memory intensive
programs like 3ds max, adobe photoshop(when dealing with large poster-size pictures) etc. Below are
some suggested steps to improve your computer's performance. 1)Reduce the number of processes
running during startup. /biggrin.gif' border='0' style='vertical-align:middle' alt='biggrin.gif'
/> This can be achieved by using the MSCONFIG provided by windows. To access this hidden program,
go to start > run and type "MSCONFIG". This will brings you to the MSCONFI...

Getting A New PC Ready To Work With Windows - Getting started with Windows OS (6)

This tutorial will help you getting started with using your new PC, which came with a Windows
Operating System. After you succesfully install Windows (that's much of an achievement
itself!), do not think that you are ready to use your PC. Actually, you're far away from
'ready' to use anything more complex than Notepad!!! ---- Section 1 : Things to install,
depending on how you use your PC ---- Office Applications : Microsoft Windows DOES NOT ship
with Microsoft Office. You have to purchace it separately. If you have done so, then be sure to i...

Disabling/Enabling Some Of Windows Features - (2)

Disabling/Enabling some of Windows features .:!:. To disable task manager Click Start > Run > and
type regedit, to run registry editor Find following address:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System Crate a new Dword and
name it DisableTaskMgr. To disable task manager give value of 1 To enable task manager give value of
0 .:!:. To disable unread email display on Welcome Screen Run registry editor and find following
address: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\UnreadMail Double click on
“MessageExpiryDays” key ...

Windows Keyboard Shortcuts - FYI (11)

CTRL+C=Copy CTRL+V=Paste Windows+E=Windows Explorer Windows+F=Search CTRL+Z=Undo Windows+R=Run
Command Windows+D=Shows Desktop Windows+U=Utility manager Windows+F1=Windows Help CTRL+A=Select All
Hope that helps to all of you computer-illiterate...

[windows 95/98/me] Force Users To Login - (1)

No doubt you noticed that in windows 95/98/me that at the loin screen a user can press cancel to
access your computer. This i guess is meant to be like a guest account but in most cases its
annoying to have. This hack will auto-logoff the user as soon as they login the this
'guest' account. IMPORTANT: THIS REQUIRES YOU TO EDIT THE REGISTRY, IF YOU DO NOT FOLLOW
THESE INSTRUCTIONS CAREFULLY YOU COULD MESS UP YOUR COMPUTER, IN SOME CASES A REGISTRY BACKUP MAY
WORK, IF YOU CAN USE IT, SEARCH GOOLGLE FOR REGISTRY BACKUP TO FIND OUT HOW TO DO THIS 1. Goto
this k...

Great Windows Tweaks - (16)

I've found mass ways to tweak windows, therfore increasing computer performance, and bandwidth.
Check out www.speedguide.net and install the right tweaks for you, i assure it will optimize your
connection, and give all of you a better surfing experience....

[all Windows] Disable Registry Editing Tools - (2)

If you want to mek it so cerin users, maybe guest or the account you getto by pressing cancel for in
95/98 to not be able to edit the regisstry this is the registry hack for you. IMPORTANT: THIS
REQUIRES YOU TO EDIT THE REGISTRY, IF YOU DO NOT FOLLOW THESE INSTRUCTIONS CAREFULLY YOU COULD MESS
UP YOUR COMPUTER, IN SOME CASES A REGISTRY BACKUP MAY WORK, IF YOU CAN USE IT, SEARCH GOOLGLE FOR
REGISTRY BACKUP TO FIND OUT HOW TO DO THIS 1. Goto this key in the registry, to get to the
registry goto Start -> Run and enter regedit QUOTE HKEY_CURRENT_USER\SOFTWARE\Micros...

WINDOWS XP HIDDEN APPS - Hidden Stuff (1)

WINDOWS XP HIDDEN APPS Not much of a tutorial but there are alot of hidden and interesting
commands you might want to take a look at. To run any of these apps go to Start > Run and type the
executable name (ie charmap). WINDOWS XP HIDDEN APPS: ========================================= 1)
Character Map = charmap.exe (very useful for finding unusual characters) 2) Disk Cleanup =
cleanmgr.exe 3) Clipboard Viewer = clipbrd.exe (views contents of Windows clipboard) 4) Dr Watson
= drwtsn32.exe (Troubleshooting tool) 5) DirectX diagnosis = dxdiag.exe (Diagnose & test ...

Looking for breaking, windows, xp, installation, exploiting, fat32, partition