VistaUser
join:2008-03-27 | reply to dave
Re: [Tip] Adding a Backdoor in Windows Vista Welcome Screen
True...many security analyst recommend a camera in protected servers and others because of Physical access intrusion that can be done to any systems.
Thanks Dave. |
|
dave
Premium,MVM
join:2000-05-04
not in ohio
 ·Verizon Online DSL
 ·Verizon FIOS
| reply to TheRul
Well, they achieve different results. The OP's method apparently gets you a command prompt running as the local System user, and your method gets you logged in as Administrator. Depending on what you're actually trying to do, pick the one that is appropriate. |
|
TheRul
You couldn't think of something?
Premium
join:2007-09-18
Victorville, CA | reply to dave
why go through all that trouble?
»www.winvistaclub.com/t12.html |
|
dave
Premium,MVM
join:2000-05-04
not in ohio
·Verizon Online DSL
·Verizon FIOS
| reply to VistaUser
Nice - a method on how to compromise security on a system that you own! I bet people are quaking in their boots about the threat from this one.
There are, of course, easier ways to get a cmd.exe running under the local system account.
That's the time it will became Illegal. Uh-huh. Sure. |
|
VistaUser
join:2008-03-27
| 
Konbanwa! Shubho oporanho! Bonjour! Magandang Gabi! Good Morning! Good Afternoon!
Good Day!
Do you remember the famous 1995 movie "The Net" by Sandra Bullock in which the famous Praetorian PI was used as a backdoor to access password-protected sites. How about creating something like that in Windows Vista?
Yes you Can! How? For more applications and detailed guide with pics, here
-> I suggest to Create a Restore Point First: rundll32.exe shell32.dll,Control_RunDLL sysdm.cpl,,4 > Create Button
-> Open the Folder Windows\System32
-> c:\windows\system32\Utilman.exe
Take the Ownership Of the File
LONG METHOD Click here
Afterwards, Right-Click the file > Properties > Go to Security Tab > To change Permission Click Edit Button > Click Administrator > Click to Check Allow Setting of Full Control option box
Another Way because I understand that your a Geek:
Open Command Prompt as Administrator, Enter the Following commands:
quote:
a. takeown /f "Directory\File"
e.g. takeown /f "c:\windows\system32\Utilman.exe"
b. icacls "Directory\File" /grant administrators:F
e.g.
icacls "c:\windows\system32\Utilman.exe" /grant administrator:F
-> Rename Utilman.exe to any for backup example: Utilman_old.exe
-> Create a copy of cmd.exe (CTRL+Drag)
-> Rename the Copy - cmd to Utilman
-> Go to your Welcome Screen > Click the Blue Magic Button pointed by the arrow as shown in the first Picture above.
That's it! 
In my observations:
-Windows Firewall is ON (Great!)
-Spyware and other Malware Protection is ON (Great!)
-System Logon is Running
-User Account Control is OFF
-You can browse the Internet
-The Location of Desktop: c:\Windows\System3\config\systemprofile\Desktop
-Launch Windows Media Player, Windows Calendar, Windows Mail and many more
-Change passwords
Is this legal? Yes, I think... My steps needs the Administrator password to create a backdoor. If you do this by using another OS like Linux to another computer of course That's the time it will became Illegal.
Also, Please tell me if this works in Windows 7.
Enjoy! |
|
