[studnikov]

Description:
With DCPC (DC PasswordChanger) you can change the password of a local Windows account, on one or more servers with one click on a button.

Additional Information:
The program says you need admin access, but I have heard otherwise....

http://www.danish-company.com/dcpc

Attached File(s)

•  dcpc1.zip (203.22K)
  Number of downloads: 645

[dmg]

Thanx mate might come in handy :)

[Buluemoon]

Going to give this a try, sure hope it works. ;)

[creep01]

Actually this one is a nice prog if you forget your password
from windows....and you havent logged out yet :)

Or it can be used for various attacks to a remote or local network

Unfortunately you need to have admin rights for this one,but as soon as you gain access to a local machine or a remote machine AND that machine gives you admin rights then what you do,is to execute this prog through its interface.

Afterwards it asks you for the new password you want to insert and it updates the password to the requested one.

The trick here and why it makes it to be so good is that it doesnt actually CHANGE the password but it adds 2 passwords for this account.Strange enuff huh? Yes so you can login with 2-3 different passwords for the SAME account. The main problem i am facing at the moment is reset it back to one password and not 4-5 for the same account.

You can always go to Control Panel- Administrative Tools - Users -
Selece the user and delete the password and add the one that you want.This way you forget about the 4-5 passwords you have added.But as i said this technique with adding 4-5 different passwords for the same account doesnt always work for the same OS.

It varies to some systems tho,to some systems you can put only one more password.Still havent figured out why.

So where is the trick? And where is the exploitation here ?
You dont have to use a password cracker,you dont have to add a user to the local or remote machine you hypothetically gained access ,but you can just add multiple passwords to the existing account.

Bottom point is that ,
Noone can see your account
You dont have to change the password of the admin ,just in case he gets suspicious,
Bad thing is that you need to have admin rights...to execute the prog

anyways,
Thanks for bringin it to our attention ,
greets to all gsecur dudes :)

[technoboy]

Quote

The trick here and why it makes it to be so good is that it doesnt actually CHANGE the password but it adds 2 passwords for this account.Strange enuff huh? Yes so you can login with 2-3 different passwords for the SAME account. The main problem i am facing at the moment is reset it back to one password and not 4-5 for the same account.

this is not true, i just tested it under vmware and while it allow me to CHANGE the admin password, it will not add a 2nd password like you said.

[technoboy]

Quote

The program says you need admin access, but I have heard otherwise....

you also *need* to have admin credentials :)

[creep01]

technoboy, on Mar 10 2004, 10:47 PM, said:

Quote

The trick here and why it makes it to be so good is that it doesnt actually CHANGE the password but it adds 2 passwords for this account.Strange enuff huh? Yes so you can login with 2-3 different passwords for the SAME account. The main problem i am facing at the moment is reset it back to one password and not 4-5 for the same account.

this is not true, i just tested it under vmware and while it allow me to CHANGE the admin password, it will not add a 2nd password like you said.

Well it worked for me under a workstation I have runnin WinXp sp1..
Now did give it a thorough test but worked .And i had to remove the password from Admin tools completely and then make a new password to reset the 2-3 i have put into this app..Give it a try..
Do the followin:

While in windows use this application..
change ur password press the windows button on bottom left of ur keyb +L
Then use the password you have reset your account to..log in..
Do the same procedure a couple of times with different passwords..and let me know if it works.. I know it works there..I wouldnt have posted unless I have tried it..

[technoboy]

creep01 , i just tested it again, i does not work like this, while the utility of adding a second 'backdoor' to a windows user would be endless, i really really doubt its even possible.

althrough i did my test under win2k, someone try with xp someone else try it, it take only a few seconds and would clarify the situation.

[fdisk2068]

Thanks great post!!! :D

[flashb4ck]

do u think that i can change other admin accounts in my lan network from my pc right now?

if this is possible i 'll start a lan party hack community *G*



gr��tz fl4Shb4Ck

[illwill]

y dont you try and find out <_<