Unlocking cmd.exe When It Is Locked By Admin

Running a Locked cmd.exe

*-This actually isn't written by me. It was written by a guy by the name of CamoDeveloper in my RSTips forums. I just wanted to share it here.

Well, I had to do this earlier today actually. I was at the library and was bored so I decided to have a little fun with Windows XP. They have a fairly cheap administrator tool on the computers, I just wanted to see how cheap. So, for starters you can't even use the "Run" tool or view the C: drive, but can access it if you use cmd.exe, the only problem is that they blocked it. So, how to get around that? Here's two fairly easy ways.

First Way

• Open up 'Notepad' or a similar text editor.
• Type in "start" with no quotations.
• Save it as a .bat file. i.e. fakecmd.exe
• Double-click it to run.

That's the easiest way, but not always guaranteed to work. Here's a better way that will work

Second Way

• Open up your text editor.
• Put the following:
  
  Code:

    @echo off
    command
    comand.com
    pause

• Save it as a .bat file
• Double-click it, and voila!

Now that I had that going, I was able to gain access to all of the C: drive. I then ran a net user batch file and added my user to the admin group giving me full control. I was tempted to format and install Ubuntu but decided not to. Didn't want to get arrested and go to jail for destroying government property. It was fun tho.

Anyway, that's about it, enjoy.

Related Articles

• Simple cmd.exe tricks for starters, by aussiedude in Ethical hacking Tips