[TechSaavy]

Hello!
I have a small problem:
I found a computer, which had an admin account, and a user, without password.
I tried guessing the admin password, and the Oph cracker, but it does not seem to work.

Some commands are blocked on the guest account, which prevents me from creating a new admin user or password for the already existing one.

Is there a way to bypass the command restrictions?
(I can access the cmd itself)

The OS running is Win 7.

Any ideas on this?

[Screamz]

Place something like a RAT on the computer and try to use it to control the computer from another one.

[TechSaavy]

Place something like a RAT on the computer and try to use it to control the computer from another one.

Wouldn't it still be with the rights of normal user, and not admin?

[Reiko]

Place something like a RAT on the computer and try to use it to control the computer from another one.

You're stupid.
Try this, OP. You're gonna need a way to get Meterpreter on a box but that shouldn't be too hard.
If there's a version of this that's not a Metasploit module, I don't care enough to find it so you're on your own.
https://www.rapid7.com/db/modules/exploi...latten_rec
CVE: http://cvedetails.com/cve/2013-3660

---

Wouldn't it still be with the rights of normal user, and not admin?

Yes. That guy's stupid.

[TechSaavy]

You're stupid.
Try this, OP. You're gonna need a way to get Meterpreter on a box but that shouldn't be too hard.
If there's a version of this that's not a Metasploit module, I don't care enough to find it so you're on your own.
https://www.rapid7.com/db/modules/exploi...latten_rec
CVE: http://cvedetails.com/cve/2013-3660

---

Yes. That guy's stupid.

Thanks a lot for help. Going to try this right away.

[Lain]

Could you possibly write the commands you need into a batch(.bat) file and run it?

[Screamz]

You're stupid.
Try this, OP. You're gonna need a way to get Meterpreter on a box but that shouldn't be too hard.
If there's a version of this that's not a Metasploit module, I don't care enough to find it so you're on your own.
https://www.rapid7.com/db/modules/exploi...latten_rec
CVE: http://cvedetails.com/cve/2013-3660

---

Yes. That guy's stupid.

Actually, In the past, I have had them gain administrative rights, I'm not saying that it is going to work, but it was a suggestion.

[TechSaavy]

Could you possibly write the commands you need into a batch(.bat) file and run it?

Hmmm. didn't think about it. Thanks for suggestion. I got admin rights by using the exploit suggested above, but I will try this too for the purpose of learning :d

[w00t]

Puppy linux

cp /WINDERS/Windows/System32/cmd.exe /WINDERS/Windows/System32/osk.exe

Try to open the on-screen keyboard from the login screen

net user <change password or create new admin>

[Reiko]

Puppy linux

cp /WINDERS/Windows/System32/cmd.exe /WINDERS/Windows/System32/osk.exe

Try to open the on-screen keyboard from the login screen

net user <change password or create new admin>

You misunderstood the question. Command Prompt wasn't disabled, OP just had very low rights.