Welcome to HBH! If you had an account on hellboundhacker.org you will need to reset your password using the Lost Password system before you will be able to login.

SYSTEM rights


SYSTEM rights

By ghostghost | 3945 Reads |
0     0

  1. open Command Prompt
  2. type: at (the next minute, in military time) /interactive "cmd.exe"
  3. when it comes up, press CTRL + ALT + DEL, go to Processes and kill EXPLORER.EXE
  4. close the original command prompt
  5. in the new prompt, type: cd ..
  6. then type: explorer.exe
  7. wait until taskbar/desktop returns
  8. close command prompt

I have found that this only works from an Administrator desktop, so it is not necessarily a good "hacking" tool.

The reason this works is because the second prompt open by the first is not directly opened by the user, it is opened by a user-assigned system process. Thus, it is opened by SYSTEM. So a prompt opened by SYSTEM should be able to open more stuff by SYSTEM, right? After all, if your name is John, and you open something in the Command Prompt, it's opened by John. So we kill YOUR explorer.exe and then ask SYSTEM to open up its explorer.exe. When this happens for the first time, Windows actually needs to set up a desktop for SYSTEM, so it may take awhile. When it has finished making the desktop, you can enjoy Windows in its own shoes!

P.S. SYSTEM is the equivalent of root on a *nix box.

Comments
Mr_Cheese's avatar
Mr_Cheese 17 years ago

neat trick i surpose. good short article.

ghost's avatar
ghost 17 years ago

wow never even thought about that :D

ghost's avatar
ghost 17 years ago

ive seen this here. http://undergr0und.net/forum/showthread.php?t=1880 and the video is here http://passivemode.net/videos/

ghost's avatar
ghost 17 years ago

great article

ghost's avatar
ghost 17 years ago

cool trick just not very useful as it can only be used in administrator account. Can someone explain to me what is better about "SYSTEM" than "Administrator"?

SySTeM's avatar
SySTeM 17 years ago

There is an easier way of doing this…

Say the time is 19:00. Open Command Prompt, type 'at 19:01 /interactive "c:\windows\explorer.exe" then ctrl+alt+del and kill explorer and it will run the new explorer from SYSTEM :)

ghost's avatar
ghost 17 years ago

cyb3rl0rd1887, in SYSTEM you can kill any process. That's the only thing I've noticed, anyway.

ghost's avatar
ghost 17 years ago

Sweet, even though it doesn't do anything its more information to your mind.

ghost's avatar
ghost 17 years ago

I am following your instructions exactly but when I kill my explorer it automatically starts a new one under my name. Do you have any ideas?