Tuesday, November 3, 2015

Hack Windows 10

Windows 10 is the Microsoft's latest OS for 2015. It's so attractive and it's better than Windows 8. For me it's great. Any way in this post I'm going to show you how to hack the Windows 10. That means I'm going to tell about following things.

  1. How to change the administrator password without administrator login ?
  2. How to create user accounts without administrator permission ?
  3. And what you should do if you forgot your live account password (If you are using your live account to login to administrator account.) ?

In windows XP, Vista, 7, and some times 8 we could use Hiren's Boot disk to achieve this. But believe me I've tried using Hiren's Boot any of password resetting or renewing or account type changing was not affected for Windows 10. So after Windows 10 HDB 15.2 will be expired.
It won't work any more. So here I'm going to give you a different but very famous trick but still work for windows password cracking till Windows 7.

1. Step :

Above I mentioned 3 Questions that I'm going to answer. We can do those things after we've done this step. From this step it will give you many things to do in Windows system.

Get your Windows 10 installation disk. Insert it and boot the machine from it. Then you will come to Setup menu. Press Shift + F10 . Then cmd (command prompt) will open. In that cmd try to find your system drive. You can find that by trying dir in each drive. Try dir command in each directory as follows.
dir c:\
dir d:\
dir e:\
When you are trying each one you will get the drive which contains the Windows directory. Let's assume in this case we got it in d:\
You know in Windows\System32 directory there's the cmd.exe. We are going to rename it as osk.exe.
Why ? Because at Windows 10 login in Ease of access There's a shortcut to On Screen Keyboard. We are going to use this shortcut to make open the cmd.exe. By renaming cmd.exe as osk.exe, when the system call On-Screen Keyboard(osk.exe) it will start the command prompt. Not only that. It will open in Administrator state. So we can change many thing. To rename we are using following commands.
move d:\windows\system32\osk.exe d:\windows\system32\osk.exe.bak
move d:\windows\system32\cmd.exe d:\windows\system32\osk.exe
move command will rename the files. After you have done close setup and let reboot.

Note : Using Windows 10 disk is not the only option. This can be done by using Hiren's boot disk, Linux boot disk or any other method which we can access the hard drive file system and make changes on it.

2. Step :

Now we are ready to do all changes. We reboot the machine and now it should have come up to login screen. At the login screen go to Ease of access and select On-Screen Keyboard. It will start cmd.

Change the administrator password:

Type   net user <admin user name>
You will ask for a password. Type preferred password and hit enter.

It is easy if we have set to log to our administrator account using local account.
But what if we have set to log to our administrator account using our MS live account? Then we cannot log to administrator account as above.
In such a scenario firstly we have to create another administrator account. And log from that account and remove the previous admin account which we was not able to log. When we removing that account It will ask whether we want to keep the user files or remove it. Then you should select keep file. So it will backup all of that  user files into a folder in Desktop with the name of that User. You can find the folder and replace all stuff in Downloads, Documents, Music ... as they were in  the previous admin user. Then again go to user control menu and rename the newly created admin user account as previous account name.

Back to Windows 10 login screen with cmd...

How to create a New administrator user.

Type   net user <preferred user name> /add
           net localgroup administrators <preferred user name>  /add
ex:
   net user test /add
   net localgroup administrators test /add

You have created administrator account called test.
After that you can do as I mentioned and bypass the live account.
After have done all of this remember to rename that system files (osk.exe.bak to osk.exe and osk.exe to cmd.exe). Other wise when you trying to open cmd it will open On-screen Keyboard.

I have use this method and saved very valuable data for a organization.
Athdutuwai prathyakshai.

No comments:

Post a Comment