hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

kkkk
So.

CODE
*Disclaimer*
The following is for educational purposes only and the writer and the person/people/place you go this file from have no responsibility for the actions taken with this knowledge.   This document can be distributed freely.   Anyone that does not agree with the Disclaimer should not continue reading further.

*Note*
In this file there are ways shown how to edit the registry. The registry controls pretty much all the actions in the windows operating system and if mishandled can result in system crashes.  
(Hehe just don't mistakenly delete the .exe AND .reg file extension. I did that once and believe me its not fun.   For all you less learned people the file extension .exe is for executable files... and the .reg extension is used to write to the registry. SO... Since I didn't have either I couldn't access any files... I couldn't fix the problem since I couldn't access the registry and couldn't use .reg files to write to the registry. I抦 just trying to say... DON'T MESS WITH THE REGISYRY)



TO execute files before logging into windows and thus getting rid of the permissions applied to logged in users...

Requirements:
- A Windows operating system that has permissions that need to be bypassed (2000, XP, Etc)
- Basic Registry knowledge
- Access to the registry (either regedit.exe or regedt32.exe)
- Permission granted to change the registry strings needed



First:

Open the registry editor that you are going to use.
- TO do this either,

- Go to >Start > Run , then type in "Regedit"
- Go to >start > Run , then type in "Regedt32"

(Without the Quotation Marks and for further reference never include the quotation marks)
(Personally I like "regedit" better but I'm just saying that there are variables)
*Note*
There are many ways to access the registry (batch files, through the GUI, command prompt, etc)



- Now that you have gotten into the registry you should see a bunch of folder-like icons on the left side of the screen.
- For "regedit" there are 5 folders that show up under "My Computer"
- HKEY_CLASSES_ROOT
- HKEY_CURRENT_USER
- HKEY_LOCAL_MACHINE
- HKEY_USERS
- HKEY_CURRENT_CONFIG

- For "Regedt32" there are 5 windows instead of 5 expandable folders

- At this point we have to find the piece of data that we are going to edit.
- For "regedit" expand the "HKEY_USERS" key by clicking on the small plus sign on the right of words "HKEY_USERS"

- For "Regedt32" expand the "HKEY_USERS" key by double clicking the "HKEY_USERS" folder.

(For Regedt32 the folders need to be double-clicked instead of single clicked as in Regedit to be expanded)

- Now that the "HKEY_USERS" is expanded there should be a bunch of folders under it including a folder called ". DEFAULT"
- Expand it.

- We are now in "HKEY_USERS. DEFAULT"
- Underneath the ". DEFAULT" expand a folder called "Control Panel"

- Right now we are in "HKEY_USERS. DEFAULTControl Panel"
- Now a folder should be visible that is called "desktop"
- This time instead of expanding the folder we need to view the contents on the folder.
- To do this single-Click the word "desktop"
- You should see a bunch of items appear in the window in the right side of the registry display.

- On the right side there are a list of items.
- Scroll down to the item called "SCRNSAVE.EXE"
- Double click on it

- Change the value of "SCRNSAVE.EXE" to the file that is going to be executed before windows logon

- Now go to the item that says "ScreenSaveTimeOut"
- Double click it
- Change its value to the time it takes for the file that is going to be executed when nobody moves the mouse (In seconds)

- You might need to change the values of
- "ScreenSaveActive" to 1
- "ScreenSaverIsSecure" to 0

- Refresh the registry by hitting "F5" on the keyboard
- restart the computer and voila you got the application to run.

Some applications that could be executed before windows start that might have some uses
--- Application Name ------------------ Executable name ---------------

- Command Prompt ---cmd.exe
- Registry editor ---Regedit.exe/Regedt32.exe
- A key logger------------


*Other Notes*

- I have realized when I opened cmd.exe and then typed in "explorer" would boot
up a windows shell.. Might have some interesting uses


=====================================================

THE ABOVE ARTICLE WAS FOUND here.




That's all
kkkk
UNDERTAKER
10x man...
but how can i do it on a remote computer?
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.