+- Sinisterly (https://sinister.ly)
+-- Forum: Computers (https://sinister.ly/Forum-Computers)
+--- Forum: Operating Systems (https://sinister.ly/Forum-Operating-Systems)
+--- Thread: [Q] Bypass blocked commands in cmd (/Thread-Q-Bypass-blocked-commands-in-cmd)
Pages:
1
2
[Q] Bypass blocked commands in cmd - TechSaavy - 09-27-2013
Hello!
I have a small problem:
I found a computer, which had an admin account, and a user, without password.
I tried guessing the admin password, and the Oph cracker, but it does not seem to work.
Some commands are blocked on the guest account, which prevents me from creating a new admin user or password for the already existing one.
Is there a way to bypass the command restrictions?
(I can access the cmd itself)
The OS running is Win 7.
Any ideas on this?
RE: [Q] Bypass blocked commands in cmd - Screamz - 09-27-2013
Place something like a RAT on the computer and try to use it to control the computer from another one.
RE: [Q] Bypass blocked commands in cmd - TechSaavy - 09-27-2013
(09-27-2013, 10:55 PM)Screamz Wrote: Place something like a RAT on the computer and try to use it to control the computer from another one.
Wouldn't it still be with the rights of normal user, and not admin?
RE: [Q] Bypass blocked commands in cmd - Reiko - 09-28-2013
(09-27-2013, 10:55 PM)Screamz Wrote: Place something like a RAT on the computer and try to use it to control the computer from another one.
You're stupid.
Try this, OP. You're gonna need a way to get Meterpreter on a box but that shouldn't be too hard.
If there's a version of this that's not a Metasploit module, I don't care enough to find it so you're on your own.
https://www.rapid7.com/db/modules/exploit/windows/local/ppr_flatten_rec
CVE: http://cvedetails.com/cve/2013-3660
(09-27-2013, 11:30 PM)CamIce Wrote: Wouldn't it still be with the rights of normal user, and not admin?
Yes. That guy's stupid.
RE: [Q] Bypass blocked commands in cmd - TechSaavy - 09-28-2013
(09-28-2013, 01:51 AM)Starfall Wrote: You're stupid.
Try this, OP. You're gonna need a way to get Meterpreter on a box but that shouldn't be too hard.
If there's a version of this that's not a Metasploit module, I don't care enough to find it so you're on your own.
https://www.rapid7.com/db/modules/exploit/windows/local/ppr_flatten_rec
CVE: http://cvedetails.com/cve/2013-3660
Yes. That guy's stupid.
Thanks a lot for help. Going to try this right away.
RE: [Q] Bypass blocked commands in cmd - Lain - 09-28-2013
Could you possibly write the commands you need into a batch(.bat) file and run it?
RE: [Q] Bypass blocked commands in cmd - Screamz - 09-28-2013
(09-28-2013, 01:51 AM)Starfall Wrote: You're stupid.
Try this, OP. You're gonna need a way to get Meterpreter on a box but that shouldn't be too hard.
If there's a version of this that's not a Metasploit module, I don't care enough to find it so you're on your own.
https://www.rapid7.com/db/modules/exploit/windows/local/ppr_flatten_rec
CVE: http://cvedetails.com/cve/2013-3660
Yes. That guy's stupid.
Actually, In the past, I have had them gain administrative rights, I'm not saying that it is going to work, but it was a suggestion.
RE: [Q] Bypass blocked commands in cmd - TechSaavy - 09-28-2013
(09-28-2013, 03:06 PM)Dogs Toy Wrote: Could you possibly write the commands you need into a batch(.bat) file and run it?
Hmmm. didn't think about it. Thanks for suggestion. I got admin rights by using the exploit suggested above, but I will try this too for the purpose of learning :d
RE: [Q] Bypass blocked commands in cmd - w00t - 09-29-2013
Puppy linux
cp /WINDERS/Windows/System32/cmd.exe /WINDERS/Windows/System32/osk.exe
Try to open the on-screen keyboard from the login screen
net user <change password or create new admin>
RE: [Q] Bypass blocked commands in cmd - Reiko - 09-29-2013
(09-29-2013, 02:01 AM)w00t Wrote: Puppy linux
cp /WINDERS/Windows/System32/cmd.exe /WINDERS/Windows/System32/osk.exe
Try to open the on-screen keyboard from the login screen
net user <change password or create new admin>
You misunderstood the question. Command Prompt wasn't disabled, OP just had very low rights.