All right, it's time for our first hands on practical, real world ethical hacking problem.
I have my old Windows seven laptop here from work that I showed you in the previous video.
And I do not remember my old username or my old password.
Well, I can find my old username just by rebooting, but I don't know what my password was years ago
when this was my primary workstation or my primary computer so I could switch users.
I certainly don't remember the administrator password for this machine.
In fact, I might have never had it.
Can't log in as an IT admin because I don't know their password.
And if I log in as a guest, which I might be able to do, I still won't be able to see any of my old
files.
And that's what I really need off of this old laptop computer.
So what I'm going to do is show you how to use to reboot to spatial key combinations and four commands
that will enter in at the command prompt, along with this Windows 10 DVD that we burned legally in
the previous episode.
We're going to see how to set up not just a user account, but an administrative user account that'll
be able to see into all these other accounts on this Windows seven computer.
I can even reset my password for my old account if it's a regular account on this desktop computer.
So we're going to see how to do both of those.
This will take our first reboot and our first special key combination.
That's probably going to be an F2, F2 or delete.
I may not be able to show you the BIOS screen, but you should be able to see really quickly the a prompt
for us to press any key to boot from that DVD once we put it in.
So I'm going to pause just for a second, put this DVD in my old laptop and then we will boot up from
Windows 10 disk with our first special key combination F to twelve.
Delete whatever it may be on your boss to change the boot sequence to boot from that Windows Ten DVD.
So I've put the disk in my computer now I am going to restart the computer and as it comes up through
by us, it's probably going to flicker away from this screen where I'm capturing, but I'm going to
press photograph 12 to change the options so that I can boot from that CD or DVD drive.
I'm showing you a simulated view right now of my F 12 that I used for this next step, but you see,
I have hit F to 12 or delete on my computer.
It's a tiny little dot screen on here, but it's asking me or by a screen, but it's asking me where
I want to boot from.
I'm going to choose that CD rom or DVD rom that option C.
And now says any key to boot from the CD or DVD.
That's where I went to press the key.
So we've used our first special key combination, either for two or of 12, got us into that location,
and now it'll take just a couple of minutes probably for this Windows 10 DVD to boot.
I'll pause just for a second to give this time to boot on an older laptop.
It'll definitely take you some time for it to come up to the Start-Up screen for the Windows 10 installation.
We're not going to install Windows 10.
We are going to repair our computer using this Windows 10 DVD and we'll see how that works.
All right, it took a couple of moments on this old Windows seven laptop for this to come up, but we
have our Windows 10 start up and it's going to ask us for a language first.
So let's just come down to the next.
English is fine for me.
And now instead of installing windows, we're going to repair your computer, make sure you choose the
repair your computer, you do not want to install this Windows 10 over your old device if you're trying
to get files off there.
So we're going to click repair your computer.
Next will choose, troubleshoot and advanced options.
And notice here we have the option for the command prompt.
This command prompt is where we're going to enter the first two of those four commands that we need
to set up a new account, a new administrative account on this old laptop or any Windows computer from
Windows XP, Windows 95, all the way through the newest Windows 10.
And there we can see the command prompt.
So we have a Windows 10 command prompt running.
And remember, this is running only from this DVD, but it's running on this computer so we can surf
to the computer from the DVD.
So we're on our sex drive is what this DVD is mounted as.
But if we do a C colon and then do a directory.
We can see Windows is right there, depending on your operating system or whether it's a new or old
computer, you may have to go to a drive.
And you do that with just DeCola and Dya, but we can see no, that is actually our CD-ROM drive.
So we're back to Seacombe.
Just showing you a couple of options for how this may work, so we want to do a deal to make sure that
we have a windows we're going to see into the Windows System 32 folder.
That's where that Sticky Keys program is.
It's also where the command prompt program is on Windows.
So CD Space C Colon Backslash Windows Backslash System.
Thirty two, and so now we've just changed directories into the Windows System 32, this is where those
two important files are the sit eight.
See, that's our sticky keys or set high contrast that and what we're going to do.
And the second file is command of what we're going to do is, first of all, make a backup of the sticky
keys so that we can have that later.
Sometimes we may want to turn on sticky keys or we may just want to cover our tracks after we've created
an account.
So I'm going to clear the screen first to make this a little easier to see if you're wondering, the
command CLX will clear the screen and my first command is to copy set HHC.
We're going to copy set h, c to set H, C underscore helda that vecsey.
And all we're doing is copying CDC over to some other filename that we can use later, like the old
next, we actually want to fire our exploit off.
We're going to copy CMPD, that XY.
Over the set H.
Seada XY file, so from now on, whenever someone presses the shift key five times, they're not going
to get set, HHC, they're going to get a Windows command prompt.
And that's how we're going to launch our compromise in the next video.
When we press enter, we're going to see overwrite this.
Yes, that's the whole idea of this exploit.
So now if I reboot my computer on my local C drive, not on the DVD, I can even pull the DVD out of
the computer when I reboot.
In fact, that's a smart idea.
When I come to the login screen, if I press the shift key five times, I will now see the command prompt
pop up and I'll be running as the administrator on that computer.
So we'll see how to do that in the next lesson.