Tutorial  Updated

Exploitation Of Windows 7 Start Up Repair and Sticky Keys

<!--Not Liable for Damages To System or Any Misuse Of Info-->
<!--Please read the comments in the "Source Of Info" May not work and can mess up your system->


Exploitation of Windows Startup Repair and Sticky Keys:

Boot windows when you see "Starting Windows" Turn off system.

Gkl3MSN.png


Turn on system than boot into windows this should pop up:

pIr536N.png


Click "Launch Startup Repair (recommended)
Let it do it's stuff. When you get this screen push "Cancel" (MUST DO THIS DO NOT CLICK "Restore")

pYxugvA.png


After pushing cancel it should pop up this Screen:

pHCiP16.png


Click on "Show problem details" then scroll down to the bottom and click the link on the very bottom. Notepad should open up. In notepad click File/Open then double click your Local Disk (The below picture is D: because of virtual box but your's should be C: if not using virtual box.)

MAyXFwT.png


Once in your "Local Disk" click "Windows" then "System32" DO EVERYTHING I DO FROM THIS POINT! IF NOT YOU MAY BREAK YOUR COMPUTER! Scroll down and find "cmd," then make a copy of it in the same folder (Ctrl-C, Ctrl-V). You should get a file named "cmd - Copy" or something like that. :

5HMRUFk.png


Then find "sethc" in the same folder. This file runs Sticky Keys (That thing when you click shift to many times.) Rename it to "sethc 1":

F7uuTRG.png


Then rename your copy of cmd ("cmd - Copy") to "sethc"

grcYqLB.png


Now exit Notepad and turn off your computer either by clicking "Finish" or Restart it manually. Now it should boot up to the login screen:

dZF2CDh.png


Click shift 5 times to open up cmd (As seen as above)
Next, we need to find out your local administrator is. To do this type in (To the cmd) "net localgroup Administrators" This will show all the admins on your PC look for an administrator account that does not have your school/work domain in front of it followed by "./" As you can see, one of the admins is named "qwaszx." This is common for schools to use random strings to ward off evil spirits (Kids).

GgF7xE2.png


Now we need to change the admin password to do so type (Into cmd) "net user <ACCOUNT NAME HERE> *" Then type in your new password twice (Into cmd) Now you can log on to the admin account! But some schools/workplaces like to disable this account if so just go and do the following things:

4J0GnCI.png


If admin disabled type "net user <ACCOUNT NAME HERE> /active:yes" This will allow you to access the admin account.

Ny5K0BL.png


(SOURCE OF INFO)
 
Last edited by Luglige,

Luglige

hiatus
OP
Member
Joined
Jan 24, 2016
Messages
1,414
Trophies
1
Location
under your bed
XP
883
Country
Antarctica
The school laptops that were distributed to my high school were easily exploitable. The IT guys were smart enough to not lock up the local admin account so a bunch of kids (including I) logged onto it. It took them around a month to finally discover it and all they did was call our parents in for a meeting :rofl:. My parents thought I hacked the school servers and I was in deep shit. Once the meeting came along all they told my parents were we logged in to a unprotected account and for me to not do it again.:teach:
xD
 

ih8ih8sn0w

Koreaboo
Member
Joined
Aug 22, 2015
Messages
1,677
Trophies
0
Age
25
Location
Hell
XP
898
Country
United States
This reminds me of a thing I saw a while back where you replaced the assistive controls thing (the thing at one of the bottom corners that has high contrast, on screen keyboard, etc.) with CMD to change the admin password. Either way, great guide. The lack of some guy with a mic making background noise and at the same time using notepad to say everything, or windows movie maker blue text screens is always a plus. You might want to include to change the files back later on (because sticky keys is the single most important program on windows) so they don't end up opening cmd when pressing shift 5 times...
 

Luglige

hiatus
OP
Member
Joined
Jan 24, 2016
Messages
1,414
Trophies
1
Location
under your bed
XP
883
Country
Antarctica
This reminds me of a thing I saw a while back where you replaced the assistive controls thing (the thing at one of the bottom corners that has high contrast, on screen keyboard, etc.) with CMD to change the admin password. Either way, great guide. The lack of some guy with a mic making background noise and at the same time using notepad to say everything, or windows movie maker blue text screens is always a plus. You might want to include to change the files back later on (because sticky keys is the single most important program on windows) so they don't end up opening cmd when pressing shift 5 times...
Ok. Thx for enjoying the guide!
 

Luglige

hiatus
OP
Member
Joined
Jan 24, 2016
Messages
1,414
Trophies
1
Location
under your bed
XP
883
Country
Antarctica
The school laptops that were distributed to my high school were easily exploitable. The IT guys were smart enough to not lock up the local admin account so a bunch of kids (including I) logged onto it. It took them around a month to finally discover it and all they did was call our parents in for a meeting :rofl:. My parents thought I hacked the school servers and I was in deep shit. Once the meeting came along all they told my parents were we logged in to a unprotected account and for me to not do it again.:teach:
The IT at my old school was really bad! Even funnier is that the internet went out every 5 minutes.
 

Luglige

hiatus
OP
Member
Joined
Jan 24, 2016
Messages
1,414
Trophies
1
Location
under your bed
XP
883
Country
Antarctica
During my freshmen year the school had 2 access points, one for all of the school provided laptops and desktops that had a 500 mb/s download speed that was protected and the other was a open guest network with a 5 mb /s download speed that blocked social media sites and stuff. The password to the protected one was '12345678' :rofl2:
-sigh- My moms password to her computer is my dad's birthday...

--------------------- MERGED ---------------------------

43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy43yerhy
Yah it's gone.
 
  • Like
Reactions: RyDog

FireEmblemGuy

Celebrating a decade of shitposting
Member
Joined
Jul 6, 2007
Messages
2,462
Trophies
0
Age
32
Location
Michigan, USA
XP
871
Country
United States
You want to hear a story about lazy school IT? It's a bit long-winded and there's no huge payoff, but I figure I might as well share.

Back in my senior year of high school, our Advanced Math II class (basically an entry-level college trig/pre-calc class) got the dubious honor of being the pilot program for an online course system (our school's first, anyways; seems like their provider had been around a few years already) as none of the teachers could really teach it; in previous years students were technically under the supervision of the Advance Math I teacher in the same hour he taught that class (which was only one hour of the day as he was also the gym teacher - it wasn't a large school by any means), but after checking in for attendance they'd go off to the cafeteria and do self-study/group study with the guidance councilor or office aides checking in every once in a while.

Anyways, since a local computer reseller/ISP had donated a bunch of new machines a year or two prior, this didn't seem like such a bad deal. Unfortunately, those were all in the main computer lab; the dozen of us taking the course got stuck in the library's research/printing room. We got a box of ratty 99 cent headsets that likely never got cleaned and a bunch of turn-of-the-century Dells designed for Windows 98, somehow limping along with the rest of the network's XP upgrade (although trying to enable standard desktop features instead of Classic mode would basically render the machine unusable until reboot). We all had network accounts with a decent amount of storage space, and had since at least as far back as '98-'99, so using the machines wasn't an issue, but following the directions for the online course proved impossible: the lecture videos wouldn't play at all on the horribly outdated version of IE installed on our machines.

So on the third or fourth day of the semester, after pretty much all of us complained to the office or our 'teacher' that we couldn't actually take our course, the IT guys came in at the beginning with a solution: "So you're gonna look in your network folder and there'll be an orange-and-blue icon called 'Firefox'..."

And of course this didn't really solve the issue: all they gave us was an installer for Firefox, instead of installing it themselves. Our user accounts could install Firefox locally, but any changes would be undone at logout; even if we used the same machine every day, we'd still have to waste 5-10 minutes of our 55-minute class period installing Firefox. We could work ahead if we were fast enough, or even work from home, but at least half of us lived outside of town, so the options were dial-up or a very terrible 3mb/s wireless service that felt like they were leeching off AT&T's 3G towers and throttling down every time they got nervous someone might notice.

By the end of the first month more than half the class had dropped; of the five or six of us that stayed I think only half actually passed the class. Somehow the whole fiasco wasn't enough to turn them off from the program; by the second semester they were using it for certain remedial/special ed classes, and by the time my brother graduated four years later I know they'd switched over at least their Spanish program.

Anyways, tl;dr version: decent system administrators for generally low-tech areas that don't feel they need one in the first place are hard to come by.

If any parent is over the age of 40 it's just a rule they follow to use really simple passwords. My mom's password to her phone is her birthday, my dad's computer is his name and yob. :sleep:
When my mom tried downloading mp3s for a mp3 player she ended up downloading <songtitle>.mp3.exe so I had to end up fixing it for her and download the mp3 she wanted off of a legit pirate site.
I can't even count the amount of hours I wasted having to remove shady malware from the family computer after my brothers or mom would download totally-legit-I-swear movies/music/porn (at least clear the download history, guys) off of Limewire or Frostwire. The irony is that I got bitched out the first time I installed Firefox on that machine because they thought it would make the machine more susceptible to viruses.

Even now, I'll end up having to bang my head into a wall trying to do IT for my parents. My mom called a few weeks ago freaking out because the trackpad on her laptop stopped working after my dad turned it off. Turns out one of them accidentally pressed the Fn combo that disabled the built-in trackpad and buttons. She's been using computers regularly for twenty years and my dad used to be a software engineer. Go figure.
 
Last edited by FireEmblemGuy,
  • Like
Reactions: Luglige and RyDog

Luglige

hiatus
OP
Member
Joined
Jan 24, 2016
Messages
1,414
Trophies
1
Location
under your bed
XP
883
Country
Antarctica
I'm lucky, my school has lots of funding for STEM so we get kids that are smarter than the IT guys, and always up to date technology. Except for the school issued laptops. My school issued these Asus shittops that had a intel atom processor, and we were expected to run photoshop, CAD, and other extensive programs that this computer could barely run. I took an animation class for my first semester and we were expected to process a 600 frame animation using photoshop on these. It could barely handle 10 pictures at once before crashing. My Computer Science teacher told me the school will be doing away with these and getting 'better' ones.
Lol. Stick in there.
 
Last edited by Luglige,

FireEmblemGuy

Celebrating a decade of shitposting
Member
Joined
Jul 6, 2007
Messages
2,462
Trophies
0
Age
32
Location
Michigan, USA
XP
871
Country
United States
I'm lucky, my school has lots of funding for STEM so we get kids that are smarter than the IT guys, and always up to date technology. Except for the school issued laptops. My school issued these Asus shittops that had a intel atom processor, and we were expected to run photoshop, CAD, and other extensive programs that this computer could barely run. I took an animation class for my first semester and we were expected to process a 600 frame animation using photoshop on these. It could barely handle 10 pictures at once before crashing. My Computer Science teacher told me the school will be doing away with these and getting 'better' ones.
Yeah, I don't know what the media program's like these days, but at least we had modern iMacs for our media class, and even then all we did with them was browser-based yearbook editing, light A/V editing for Class of 20xx grad videos, occasional film assignments, etc.; we were never expected to do more than basic Office and research stuff on the other computers either.

College is a whole different ballpark, thankfully, but IT's still sketchy. I moved even further up north thanks to Northern Michigan being surrounded by great forest, cliff, and 'mountain' hiking within walking distance of town, and some nice Lake Superior shoreline, but they're really up on the tech, to the point of issuing students new (leased) laptops every couple years and having a robust free off-campus internet system. When I first enrolled it was bad, with the new machines running Windows 7 on the bare minimum, with probably some of the lowest-quality Thinkpads I'd seen in years. I re-enrolled a couple years ago and it's much better now - ultrabooks well above minimum spec (I can even get decent framerates on MGSV and Tales of Zestiria) and the WiMAX system is being replaced by a free, unlimited LTE system (on a band most US cell phones can't abuse) across the city and a few surrounding towns; I've been able to push around 25mbps everywhere I've used it. Unfortunately the tech team's solution to everything is to reimage your notebook, and they never even made a new image for the new ones - just the ones for the 2013/14 machines, complete with Windows 8 (not 8.1) and driver sets for completely different machines. Even a Windows XP VirtualBox image, even though virtualization technology is turned off without the ability to re-enable it in the BIOS. I had to take mine in to get an LTE card installed, and since I was running Windows 10 they insisted it wouldn't work. I told them that was fine, just install it and I'll figure out the driver issues myself. They refused and reimaged to Windows 8. It shouldn't be a surprise to learn that the LTE works fine with both Windows 10 and Arch Linux.
 

Luglige

hiatus
OP
Member
Joined
Jan 24, 2016
Messages
1,414
Trophies
1
Location
under your bed
XP
883
Country
Antarctica
Yeah, I don't know what the media program's like these days, but at least we had modern iMacs for our media class, and even then all we did with them was browser-based yearbook editing, light A/V editing for Class of 20xx grad videos, occasional film assignments, etc.; we were never expected to do more than basic Office and research stuff on the other computers either.

College is a whole different ballpark, thankfully, but IT's still sketchy. I moved even further up north thanks to Northern Michigan being surrounded by great forest, cliff, and 'mountain' hiking within walking distance of town, and some nice Lake Superior shoreline, but they're really up on the tech, to the point of issuing students new (leased) laptops every couple years and having a robust free off-campus internet system. When I first enrolled it was bad, with the new machines running Windows 7 on the bare minimum, with probably some of the lowest-quality Thinkpads I'd seen in years. I re-enrolled a couple years ago and it's much better now - ultrabooks well above minimum spec (I can even get decent framerates on MGSV and Tales of Zestiria) and the WiMAX system is being replaced by a free, unlimited LTE system (on a band most US cell phones can't abuse) across the city and a few surrounding towns; I've been able to push around 25mbps everywhere I've used it. Unfortunately the tech team's solution to everything is to reimage your notebook, and they never even made a new image for the new ones - just the ones for the 2013/14 machines, complete with Windows 8 (not 8.1) and driver sets for completely different machines. Even a Windows XP VirtualBox image, even though virtualization technology is turned off without the ability to re-enable it in the BIOS. I had to take mine in to get an LTE card installed, and since I was running Windows 10 they insisted it wouldn't work. I told them that was fine, just install it and I'll figure out the driver issues myself. They refused and reimaged to Windows 8. It shouldn't be a surprise to learn that the LTE works fine with both Windows 10 and Arch Linux.
But in all seriousness you should get into the IT biz.
 

Luglige

hiatus
OP
Member
Joined
Jan 24, 2016
Messages
1,414
Trophies
1
Location
under your bed
XP
883
Country
Antarctica
But you want people to not know that you just 'hacked' the persons computer, Oh wait I can't speak un ethical. By a security specialist standpoint it would be a pain in the butt. No one uses sticky keys anyway.

Also sorry about the pictures, I think Evilzone is offline at the moment as I wrote the guide there and I just copied and pasted the guide over here. I'm gonna try and fix it later.
 

Youkai

Demon
Member
Joined
Jul 1, 2004
Messages
2,552
Trophies
1
Age
36
Location
Germany , NRW
XP
2,445
Country
Germany
there are enough schools that would kick you out for doing this ....

Actually you see this tutorial EVERYWHERE ! even though slighty different as you usually replace ultiman.exe with the cmd and than you can just create yourself an admin account and login to the computer (still if the PC is in a domain you could only create and login to a local account)
With XP you could just boot into the safe mode and could just login as an admin without a password XD no idea if this still works ...
As we use a Domain at work I usually do not need to crack open any accounts ^^
 

Luglige

hiatus
OP
Member
Joined
Jan 24, 2016
Messages
1,414
Trophies
1
Location
under your bed
XP
883
Country
Antarctica
there are enough schools that would kick you out for doing this ....

Actually you see this tutorial EVERYWHERE ! even though slighty different as you usually replace ultiman.exe with the cmd and than you can just create yourself an admin account and login to the computer (still if the PC is in a domain you could only create and login to a local account)
With XP you could just boot into the safe mode and could just login as an admin without a password XD no idea if this still works ...
As we use a Domain at work I usually do not need to crack open any accounts ^^
That's Cool! My school's IT is pretty bad. I have to fix the stuff around there. The principle even gave me the name "Resident IT"
 

mgrev

Music Addict, Video Game Fanatic
Member
Joined
Apr 13, 2015
Messages
1,916
Trophies
0
Location
Under Tomato Hentai's stairs
XP
1,537
Country
Norway
That's Cool! My school's IT is pretty bad. I have to fix the stuff around there. The principle even gave me the name "Resident IT"
our school has almost no security at all. the BIOS settings doesn't even have a password. no site is blocked here either. (sometimes they block for the students only, but then i'll just spoof my MAC-adress
 

Luglige

hiatus
OP
Member
Joined
Jan 24, 2016
Messages
1,414
Trophies
1
Location
under your bed
XP
883
Country
Antarctica
our school has almost no security at all. the BIOS settings doesn't even have a password. no site is blocked here either. (sometimes they block for the students only, but then i'll just spoof my MAC-adress
xD I was able to boot a certain custom OS on the computers at my school.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    Psionic Roshambo @ Psionic Roshambo: I'm in my birthday suit! Lol