Login in Windows Vista Ultimate without and credentials

Posted: 03-13-2007, 05:53 AM
There is a serious bug found in Windows Vista Ultimate, which allow the user
to login in to Window Vista System without providing any credential. It just
requires the attacker to access the victim system, for the first time. To
gain access to victim system, follow these steps.

1) Open System32 folder of your windows.
2) Copy Cmd.exe, Magnify.exe and paste it in two different locations, for
safety purpose.
3) Rename the cmd.exe to Magnify.exe on the backup location.
4) Copy & paste the renamed cmd.exe to system32 folder, this asks for
replacing the Magnify.exe, just continue with replacing.
5) Now restart the system.
6) After restarting the system, the login screen will come, now select the
utility manager, which is on the below left on the screen.
7) Now check the Magnify check box, to open the Magnify.exe, but now this
will open the cmd.exe.
7) In the command prompt, just type the explorer.exe, this will open the
explorer.exe, and desktop, without login in to the system. The user account
provided for login is the system account, so u can do anything with the
system.
You can also play with the windows registry, services, user account change,
and deletion of user accounts, anything you want.


I don’t understand why Microsoft is failed to look in to simple problems.
This is the simplest way to hack the windows vista, without any hacking
knowledge.


Reply With Quote

Responses to "Login in Windows Vista Ultimate without and credentials"

Jane C
Guest
Posts: n/a
 
Re: Login in Windows Vista Ultimate without and credentials
Posted: 03-13-2007, 07:19 AM
That's assuming that the victim's pc is turned on and logged in. In which
case, the "attacker" already has access. No need for stupid hacks.

--
Jane, not plain 64 bit enabled :-)
Batteries not included. Braincell on vacation ;-)
"Abhishek Choudhary" <AbhishekChoudhary@discussions.microsoft.com> wrote in
message news:8E08DD22-5B00-43EA-959E-68CD7A6835D1@microsoft.com...
> There is a serious bug found in Windows Vista Ultimate, which allow the
> user
> to login in to Window Vista System without providing any credential. It
> just
> requires the attacker to access the victim system, for the first time. To
> gain access to victim system, follow these steps.
>
> 1) Open System32 folder of your windows.
> 2) Copy Cmd.exe, Magnify.exe and paste it in two different locations, for
> safety purpose.
> 3) Rename the cmd.exe to Magnify.exe on the backup location.
> 4) Copy & paste the renamed cmd.exe to system32 folder, this asks for
> replacing the Magnify.exe, just continue with replacing.
> 5) Now restart the system.
> 6) After restarting the system, the login screen will come, now select the
> utility manager, which is on the below left on the screen.
> 7) Now check the Magnify check box, to open the Magnify.exe, but now this
> will open the cmd.exe.
> 7) In the command prompt, just type the explorer.exe, this will open the
> explorer.exe, and desktop, without login in to the system. The user
> account
> provided for login is the system account, so u can do anything with the
> system.
> You can also play with the windows registry, services, user account
> change,
> and deletion of user accounts, anything you want.
>
>
> I don’t understand why Microsoft is failed to look in to simple problems.
> This is the simplest way to hack the windows vista, without any hacking
> knowledge.
>
>
Reply With Quote
WHIM1987
Guest
Posts: n/a
 
Re: Login in Windows Vista Ultimate without and credentials
Posted: 03-13-2007, 01:30 PM
I am unsure where to post this message, so I will try here first. A virus
destroyed my XP operating system, so I bought Vista Home, since I am a
student on a budget. However, without even using it, the system fails to
activate because my product key is in use. How is this possible, if I
purchased it and was the only person to activate using it? Would this affect
my computer or any future networks?
Reply With Quote
Richard G. Harper [MVP Shell/User]
Guest
Posts: n/a
 
Re: Login in Windows Vista Ultimate without and credentials
Posted: 03-13-2007, 02:23 PM
This is both the wrong place and the wrong way to post a question. When you
post in an existing discussion folks assume your post has something to do
with the existing discussion, which yours does not. And they assume you're
replying to/adding to an ongoing discussion, which you aren't.

Anyway, call the telephone activation center. Since we don't know where you
got your copy of Vista it may or may not be legitimate. The telephone
activation center will help you sort it all out.

"WHIM1987" <WHIM1987@discussions.microsoft.com> wrote in message
news:2F8A67F5-6562-48C8-B740-B24B6EA3E56D@microsoft.com...
>I am unsure where to post this message, so I will try here first. A virus
> destroyed my XP operating system, so I bought Vista Home, since I am a
> student on a budget. However, without even using it, the system fails to
> activate because my product key is in use. How is this possible, if I
> purchased it and was the only person to activate using it? Would this
> affect
> my computer or any future networks?
Reply With Quote
Mike Brannigan
Guest
Posts: n/a
 
Re: Login in Windows Vista Ultimate without and credentials
Posted: 03-13-2007, 11:14 AM

"Abhishek Choudhary" <AbhishekChoudhary@discussions.microsoft.com> wrote in
message news:8E08DD22-5B00-43EA-959E-68CD7A6835D1@microsoft.com...
> There is a serious bug found in Windows Vista Ultimate, which allow the
> user
> to login in to Window Vista System without providing any credential. It
> just
> requires the attacker to access the victim system, for the first time. To
> gain access to victim system, follow these steps.
>
> 1) Open System32 folder of your windows.
> 2) Copy Cmd.exe, Magnify.exe and paste it in two different locations, for
> safety purpose.
> 3) Rename the cmd.exe to Magnify.exe on the backup location.
> 4) Copy & paste the renamed cmd.exe to system32 folder, this asks for
> replacing the Magnify.exe, just continue with replacing.
> 5) Now restart the system.
> 6) After restarting the system, the login screen will come, now select the
> utility manager, which is on the below left on the screen.
> 7) Now check the Magnify check box, to open the Magnify.exe, but now this
> will open the cmd.exe.
> 7) In the command prompt, just type the explorer.exe, this will open the
> explorer.exe, and desktop, without login in to the system. The user
> account
> provided for login is the system account, so u can do anything with the
> system.
> You can also play with the windows registry, services, user account
> change,
> and deletion of user accounts, anything you want.
>
>
> I don’t understand why Microsoft is failed to look in to simple problems.
> This is the simplest way to hack the windows vista, without any hacking
> knowledge.
>
This is not a hack - to perform the steps you outline below you have to
already have physical access to the PC and be able to logon locally or
remotely with sufficient credentials to perform all the steps you outline
replacing files in system32 etc.. In which case you have already
compromised the system
This is not a hack as the compromise has to already be done prior to your
trivial example of throwing a command prompt under system context which has
been a know ability by many other methods on Windows NT/2000/XP/2003 systems
since day one.

This is a none issue.
--
Mike Brannigan
>
Reply With Quote
Richard G. Harper [MVP Shell/User]
Guest
Posts: n/a
 
Re: Login in Windows Vista Ultimate without and credentials
Posted: 03-13-2007, 02:22 PM
If you let someone have physical access to your computer, they already own
it. The rest is window dressing.

"Abhishek Choudhary" <AbhishekChoudhary@discussions.microsoft.com> wrote in
message news:8E08DD22-5B00-43EA-959E-68CD7A6835D1@microsoft.com...
> There is a serious bug found in Windows Vista Ultimate, which allow the
> user
> to login in to Window Vista System without providing any credential. It
> just
> requires the attacker to access the victim system, for the first time. To
> gain access to victim system, follow these steps.
Reply With Quote
Puppy Breath
Guest
Posts: n/a
 
Re: Login in Windows Vista Ultimate without and credentials
Posted: 03-13-2007, 02:50 PM
LOL. During the beta I'd see reports of supposed security flaws where the
first required step was to log into the system Administrator account (not
even a local administrator account). I mean, - duh - if you're logged in as
system Administrator, you can do anything you want ayway.


"Richard G. Harper [MVP Shell/User]" <rgharper@gmail.com> wrote in message
news:29DAF786-DD87-4CDD-A351-87E676DE666E@microsoft.com...
> If you let someone have physical access to your computer, they already own
> it. The rest is window dressing.
>
> "Abhishek Choudhary" <AbhishekChoudhary@discussions.microsoft.com> wrote
> in message news:8E08DD22-5B00-43EA-959E-68CD7A6835D1@microsoft.com...
>> There is a serious bug found in Windows Vista Ultimate, which allow the
>> user
>> to login in to Window Vista System without providing any credential. It
>> just
>> requires the attacker to access the victim system, for the first time. To
>> gain access to victim system, follow these steps.
>

Reply With Quote
Dustin Harper
Guest
Posts: n/a
 
Re: Login in Windows Vista Ultimate without and credentials
Posted: 03-13-2007, 04:21 PM
A better hack: Log in as administrator. (requirement for hack below)

There you go! You have admin access!

--
Dustin Harper
dharper@vistarip.com
http://www.vistarip.com

--
"Abhishek Choudhary" <AbhishekChoudhary@discussions.microsoft.com> wrote in
message news:8E08DD22-5B00-43EA-959E-68CD7A6835D1@microsoft.com...
> There is a serious bug found in Windows Vista Ultimate, which allow the
> user
> to login in to Window Vista System without providing any credential. It
> just
> requires the attacker to access the victim system, for the first time. To
> gain access to victim system, follow these steps.
>
> 1) Open System32 folder of your windows.
> 2) Copy Cmd.exe, Magnify.exe and paste it in two different locations, for
> safety purpose.
> 3) Rename the cmd.exe to Magnify.exe on the backup location.
> 4) Copy & paste the renamed cmd.exe to system32 folder, this asks for
> replacing the Magnify.exe, just continue with replacing.
> 5) Now restart the system.
> 6) After restarting the system, the login screen will come, now select the
> utility manager, which is on the below left on the screen.
> 7) Now check the Magnify check box, to open the Magnify.exe, but now this
> will open the cmd.exe.
> 7) In the command prompt, just type the explorer.exe, this will open the
> explorer.exe, and desktop, without login in to the system. The user
> account
> provided for login is the system account, so u can do anything with the
> system.
> You can also play with the windows registry, services, user account
> change,
> and deletion of user accounts, anything you want.
>
>
> I don’t understand why Microsoft is failed to look in to simple problems.
> This is the simplest way to hack the windows vista, without any hacking
> knowledge.
>
>
Reply With Quote
 
LinkBack Thread Tools Display Modes
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
Vista Ultimate 32 and Windows XP Networking Hedgy Windows Vista Networking & Sharing 9 05-21-2007 06:30 PM
UNIX X Windows display for Vista Ultimate kbedka Windows Vista Networking & Sharing 4 05-07-2007 04:08 AM
Windows Vista Ultimate Backup to Network ellisf Windows Vista Networking & Sharing 0 04-12-2007 02:36 AM
Windows Vista Ultimate Unexpected Shutdowns Vincent Windows Vista Performance & Maintenance 0 03-27-2007 11:57 PM
Windows Vista Ultimate - No Enterprise Windows Vista 13 03-08-2006 01:55 PM