And the previous lesson we saw how to exploit this vulnerability, the sticky keys command and replace
it with the command prompt and this lesson, we have removed our DVD from the computer after running
this exploit.
And now we're going to compromise this Windows seven laptop with our command prompt, sticky, key hack.
So all I'm going to do is reboot this computer.
And you can see this time we're booting into the regular Windows seven Bhoot.
And now we're back to the booted Windows seven laptop, I still don't know the username be Paines password
from several years ago, though, when I use this laptop.
So let me show you how we run the sticky keys hack.
All we need to do is our second special key combination.
We're going to hit the shift key five times.
One, two, three, four, five.
And you know what that is there, that is a Windows command prompt, I'm going to make a little bigger
so you can see it better.
There we go.
That's a little better.
And now let's find out what user I'm running ads.
Who am I?
T a thought system, I am the system level or route user on this Windows seven laptop, and remember,
this works for any Windows computer from Windows 95 XP all the way to the latest Windows Point one.
I am now able to run administrative level commands on this computer, including changing my old password.
So if you just want to change your password on the machine, remember I had a user on here called Beat
Pain because I was the user of this computer several years ago.
I can enter just one more command that is net user and my username beeping and a new password.
Well, I could set a simple password to just be paying for this time.
And notice now my old username from several years ago that I could not remember anymore has a new password
of beeping so I can log in now is beeping and B pain.
But I want to do one extra step.
We mentioned that we could create new user accounts and even make them administrators.
I'm going to create a new user with the same net user command and I will set a username of Iron Man
with a password of Jarvis.
And all I need to do is add the HDD or the add command, and what this will do is create a new user
called Ironmen with the password.
Jarvis, notice the command completed successfully.
Well, if I log in now as Iron Man and Jarvis, I'm going to be a regular user, just like Depayin may
have been a regular user on this computer.
If I want to make those users administrators, I need to use one more command.
And this is our fourth total command.
We used our first two to copy over the set H.S. to back up the CMC to our set H.S. and now we've done
a net user Ironman ad.
We're going to do a net.
Local group administrators.
And we tell the user that we want to add to administrators ironmen.
You can even add your own username, I could also add be paying up here, but I'm just adding a new
user, Iron Man, with a password of Jarvis.
Then I'm adding to the local group of administrators.
In other words, the administrators on this computer, the admins, the super users on this Windows
seven computer that I used to own.
And I finished the command with add net local group administrators and the username and the command
completed successfully.
Well, that means now I should be able to log on as ironmen.
Using a password of Jarvis, I should also be able to log in as my old user, be paying and be paying.
So when we come back, we're going to see how to log in as beeping with my username that I just reset
to be paying.
And we'll see how to log in as this new administrator, Iron Man, who's going to have a password of
Jarvis.
And we'll have full access to all the files on the computer that are not encrypted.
Will see the hack finale in the next lesson.