0

Today a colleague of mine managed to run cmd as admin without credentials. He does not have admin privileges so normally he can't do that.
He refuses to tell us how he did it.
Any idea how to do this in windows 10?

Comments
  • 1
    Idk about win10, but back in the xp/vista days. I was able to get access to the default Administrator account by booting in safe mode. I wouldn't get surprised if a similar thing is still present in recent versions of the OS.
  • 1
    There are MANY ways to do that.
  • 0
    @blockchaintacos 1 that works will suffice
  • 1
    @SGrigorov Google “sticky keys Windows 10” - replace any malware with cmd instead
  • 1
    @SGrigorov if Visual Studio is installed, you can launch external program through Tools menu and will launch as admin, including launching cmd
  • 1
    @SGrigorov and then there are tons of methods for privilege escalation —> just google that phrase and you’ll find plenty
  • 0
    @blockchaintacos tried the visual studio one but its not working
  • 0
    @SGrigorov must not have been installed to run as admin then, which is odd to me
  • 0
    @blockchaintacos damn i was really hoping to figure a way to do it
  • 0
    @SGrigorov still many other ways. Did you google “privilege escalation”
  • 0
    @blockchaintacos yeah but a bunch of old videos poped up and it seemed not that easy to do or at least that's what I understand
  • 0
    @SGrigorov I never said it would be easy, just that there are many ways to do it. Tons of projects on GitHub that automate quite a bit of it if you don’t mind launching an exploit kit on your box - but I don’t recommend that....

    Also, I don’t recommend trusting YouTube videos much on this. Read stuff, especially code on GitHub or blog posts linking to code or explaining methods.
  • 0
    @blockchaintacos yeah but my goal was just to figure out how my coworker did it. He told me it was simple and easy but w/e.
  • 0
    Try to right click on a shortcut on the desktop, then show its folder, and finally move to C:\Windows\System32 (using the new opened Explorer) and open cmd.exe

    It should work if you’re lucky.
Add Comment