How To: Hack Windows 7 (Become Admin)

Hello guys & ladies, I'm a year 7 school kid and i don't really know anything about cmd, i know a few commands and one javascript command but could someone please simplify this for me? my goal is to make the school bells ring out Nirvana and Queen on the last day. I know I'm a little late to this conversation but please, if someone could help me.

Thanks,
The little school kid...

Another One Bites the Dust obviously nobody's ever tried to wipe off the administrator on this computer because I'll tell you what I've been doing this coming up on for months I tried every f*** thing out there nothing works nothing I'm about ready to go to break into Fort Knox and steal the gold there because you know my chances are probably

1000 2 one shot I would probably get away with stealing the gold before I get the administrator off this computer it's an Acer Inspire 1 it's Windows 7 starter built-in administrator with domain knowledge base and Vista so you have 3 administrators to f** with and the ministrator and guests are not activated and you can't activate them by the time I'm done with this I'll be dead might as well just go buy a new computer be better off

If I do net user administrator /active:no does this turn off admin? Silly question but curious

Depends on points of view, you are totally right. I was not trying to put down what you wrote.

Thank you F.E.A.R that's work today on my HP Notebook. I've try several times hard booting to get start up repair but whatever u'r trick help me out. ThAnk you F.E.A.R

How do you use Linux? I think you do it by booting a live disk and entering single user mode (how do you do that). It will start in tty and you type in passwd and the password that you want. (please tell me if that is correct as I want that for my 'computer instructions' folder.

You can use konboot.it makes it easier

Thank You CYBERHIT! (my first +1 yay!)

Second.

Thank You CIUFFY! (woohoo!)

Third.

Welcome to Null Byte and thanks for that awesome tutorial.

Fourth.

Welcome to Null Byte; you'll fit in nicely.

ghost_

Thank You! GREENLEMON. I''ll make some more tutorials if you just keep encouraging me like that.

@F.E.A.R
Thank you very much for that awesome tutorials.
Thumbs up, more grease to your elbow!!!!!!!!

Great tutorial, besides that some of us or all of us already knew about this, but congratulations and thanks for doing it, keep it up.

Welcome! I know that some you may know about this, I had also mentioned in the tutorial's 3rd line. But I wanted one like this to be in nullbyte.

Thank You everyone for your likes and comments

cool hack but does not work on certain hp pc with windows 7 because of the way the system restore options are set up. Awesome article none the less ....Thanks for sharing

Sorry for the late reply Buckero,

I think, it works on every win7 PC , but sometimes the boot options arnt enabled from the start. I'll tell you the cmd afterwards (12hrs)

You could be right on that one, but the instance i saw on the HP windows 7 pc i tried it on was that after step/bullet point 6 it loaded a HP system restore screen and did not let me go back to the default windows one. Check it out if you can , I am curious to hear your feedback on this issue. If i can ill take a screen shot and post it.

PS. Agreed that the issue with most local hacks of windows pc's is that in most instances you will not be able to boot from a USB or CD because any admin that has any sense will disable those functions on company/school comps.

HP computers do still give you an option to get into a windows screen. Whether it be cmd or the system restore screen.

I can't remember exactly how to get back there because it's been about half a year since my previous job, but it is there I know it.

ghost_

cool ill do some experimentation

Type this in a command prompt, (open a command prompt with admin privileges):

• bcdedit /set {default} bootmenupolicy legacy

I use this to in win8 to bring up the options, where you can also press F8 for more...
To revert back type:

• bcdedit /set {default} bootmenupolicy standard

so i tried to enter bcdedit /set {default} bootmenupolicy legacy as admin but it throws this:

The element specified is not recognized, or does not apply to the specific entry
Run "bcdedit /?" for command line assistance.
Element not found.

cool ..will let you know how it goes......thanks again

Can you get me a screenshot of the command prompt and the HP PC's boot screen?

sure will see what i can do

I can't get through the lat procchangw to chthe passwop asterisk writi?ng the password

?? could you re-frame your question please

f.e.a.r
sir,
i have completed all the steps as you have mentioned above but the last step was creating a problem so please help me.

At the last step when i have restart the PC, go to the log-in screen, press shift 5 times, until a cmd (command prompt) pops-up.

then i have changed all the guest account on my window but not the administrator password because it was not changing i think my administrator had created a security setting. so, please suggest me some help. please thanking youuuuuuuuuuuu.............

Hi Manohar!
Welcome to Null-Byte!
Use this command on the log-in screen in cmd:

• net user administrator *

Replace 'administrator', with any admin account name, you want to change password for.
It will then ask for a new password.

Or net user administrator password

what if I don't know the administrator name?

Also, I got all the way to the end, but did not find a file named sethc in system32
ugh

Nice, works, Thanks

I have no, "sethc" file in my system32 folder. Just to let you know this is a hp dinosaur. Thanks for any help. probably just going to Re install Windows.

You probably didn't change the "Files Type" to "All Files".

I had the same problem. For some reason, there isn't a sethc file in the same folder. I was however able to see copy and rename CMD to sethc without being prompted to replace a file, but when I press shift four times on the startup sticky keys shows up instead of the command prompt.

Does It work on w8 or w10?

He said that they fixed it in windows 8 unfortunately.

what is UPS?

Uninterrupted Power Supply

Hi F.E.A.R.!

I'am really amazed with what I have learned about this. But, I encountered another problem. I followed all the steps until I typed "net user administrator /active:yes" in cmd. But shockingly, I says "system error 5 has occured

Acces is denied". What is the next step? Thanks!

Same here,

Help us...

win 7, 32 bit
net user administrator /active:yes
I got the following message:
DNS server not authoritative for zone

when i get to this step,"ignore it, click on "View Problem Details" arrow, scroll down to the end of the report, then click a link stating X:\windows\ something...something (the link starts with an"X") the window that pops" that is not the window that pops up.

options are view diagnostic and repair detaiils but no link to the x: and the other option is view advanced options. laptop is lenovo

everything is great until i search for "sethc" ... it ends up just opening the notepad file instead of leading me to the destination! does anyone know the exact destination sethc and cmd so i can search/rename manually?

all good! figured it out. fantastic way to do it without a third party. it took a second go because i messed a bit with other files and had to restore, but i manually looked for sethc and cmd and it went well. another thing i noticed - just in case this happens for others - is that when i typed a new password for the admin, it didn't show. but don't fear! if you type it correctly twice it'll still work without characters appearing. the chance to retype it to make sure it works it there.

Having trouble while changing password. When i open the notepad, it shows the window that contains the drivers. When i click the c: drive , it shows the empty window. In c: drive only i installed the OS .

Can any one clarify the problem???

this will delete new files right? if so i dont want to delte new imortant files

Does this work on an encrypted drive?

Playing league of legends on school pc now thanks.

I tried this exploit on a Windows 10 PC (Modifying the "sethc" executable using Ubuntu) and it worked. The Windows operating system is still vunerable unless someone locks up the BIOS.

Ntpasswd deserves an honorable mention -- it's one of the classic tools for resetting/blanking windows passwords (if cracking it is too much trouble) and it will go right into the SAM hive and rewrite the password to any local account. The only caveat is that if you reset a password where the user account has folders that are encrypted with bitlocker then you will lose the encrypted stuff. That said, most PCs don't use bitlocker as it must usually be manually implemented.

So uh im new to this, what is this Ntpasswrd thing and how do you use it?

you should delete this tutorial now because it no more working on new iso files . in new iso files it requires password from admin to start the repair ,so it is a old school tutorial now!!1

roblox

using net user administrator /active:yesgives the output as the command completed successfully but it doesn't give me the access. Nothing happens after the message so i tried net user administrator <asterisk> and it worked so i could change the password. Is there an update patch that prevented the first command from executing?

Can't detect the CD once boot from it.

I got through everything until I get to the login screen, it just comes up quickly and says something like "Program is too big to fit the memory" or something like that

Help please! Windows 7, did everything from start to finish cmd only pops up for a split second. What did I not do?

Is this will got you caught by the IT department or its safe ? Thnxxx

When I run the Net command I get "Access Denied" error code 5. What gives?

When I get to the restore screen. It goes for 5 minutes and then goes to the startup login screen. There's no error screen.

Disregard my last comment. I look at the pic as "click restore" but didn't read the text above it to click cancel. Got all the way to rename "sethc" and can't find "sethc" file.

Okay, I guess I should have messed around with it before posting.... this worked and was an awesome tutorial. So, it's not always your C: drive. My hard drive was under D drive. I got this laptop from a school auction lot so knew nothing about it. Made admin active. Changed admin password. Went to new user and I'm in. Thank you very much for the tutorial

I have followed tutorial iam having problem at end where I am renaming the stick keys file and copying the command prompt file when I finally restart computer and hit shift 5 times the command prompt isn't popping up the stick keys are no longer popping up but as I said no command prompt so I'm guessing it's how I am copying and saving the command prompt could someone in detail please explain this step I copied the whole notepad page under cmd.exe pasted in a new notebook page and saved it under sethc so I believe iam not copying the cmd file properly any help is greatly appreciated

Please help!

So I messed up kinda bad. In step 3 I got confused but thought I did it correctly when it said to "search for cmd, makes its copy and rename the copy as sethc". I closed everything and proceed with rest of the tutorial and it didnt work when I went pressed shift 5 times at the login page. So now when I try to access command prompt after I log in nothing happens when i double click command prompt in the start menu. I cant do anything at all on my computer without an administrator password. WHAT DO I DO NOW?????

Thank you so much, this is works and I really like it..
Thank you...

not working in my fujitsu
after 3rd step resque care shows up
is there any solution

I know this is an old article, will it work on windows 7 enterprise? I have an old HP elitebook laptop from a company that i used to work for that is no longer in business

I tried to do this, but the sticky keys didn't work after this even after copying the copy file and renaming it. Plus it isn't showing the command prompt after I pressed shift 5 times.