Now you surely don’t want the real admin to track you. And a new user called username with admin privilege will be added.Īnd thats it, you have admin privilege of the system and you can do what ever you want to with it.net user localgroup administrators username /add.Login screen, press the shift key >=5 times. Now if u press SHIFT key >=5 times, a command prompt will Replace?” and after pressing OK, you have replaced the sethc.exe with ur ownĬmd.exe. Windows will ask, “that another file exists, do u want to Won’t allow u to copy) rename it to sethc.exe, go tothe system32 folder,Īnd paste it. Pick cmd.exe, copy it at a folder other than system32, (because windows If u understand this much, then the exploitation is very simple for you. Showed up, BUT THIS TIME SINCE NO USER HAS LOGGED IN IT RUNS WITH The file executes even if u log off, and have the windows login screen is.

The TASK manager under processes, it shows your user name as a guest.

Which is executing the file i.e if u have logged on as a guest then in Also, it runs with the privilege of the CURRENT USER “sethc.exe” located in the system32 folder.

When SHIFT key is pressed >=5 times, windows executes a file named.

This file is located in C:WINDOWSsystem32 folder, or You can verify this in TASK manager (don’t close the pop-up When u press, the SHIFT key >= 5 times, a file with the name “sethc.exe” isĮxecuted.

The windows System32 directory should be writable.

On Pressing SHIFT >= 5 times, a pop up should appear.

Finally, if the following 2 requirements are set up on your system, then you are all set to enter into your admin’s account.

And u can do this even with a guest account. Keyboard tab, in sticky keys, click on settings and enable the

Have you ever noticed that if you press your system’s SHIFT key >= 5 times continuously a pop-up Windows occurs with the name “Sticky Keys”? If it doesn’t pop up on your comp, then maybe your shortcut is turned off.

Ever thought of how to get into your friend’s system and see the access denied files and folders? Or ever wanted to hack into someone’s admin account? Well here is a method which exploits yet another windows bug.

Task manager access denied windows 10