T
TheDeathDealer
Guest
Ok, this will be an ongoing tutorials as I learn more as well. So here goes:
This is the most useful command i have learned and it can allow many holes for you to exploit further... which i will explain after this
RUNAS:
edc2021 is to be replaced by your server name, you can find this out at the login screen on the networked computer upon boot
mstar4 is the username, on my school computer it is MSTAR4, I'm Mat Stares, so it uses the first four letters of my last name...
WHAT THIS COMMAND WILL DO UPON EXECUTION: This command will send you into CMD using THAT person's login, but will bypass alot of the blocks the admin has set, like on my computer it allows me access to C: and cmd, which is usually blocked completely, and regedit etc...
After you have used the runas command you can further exploit the computers so that you can add everything to the startbar etc.. if it wasn't already there:
ACCIDENTALLY PUT OPPOSITE SCRIPT UP USE THIS ONE
Save that as a .bat using notepad then execute it using the cmd you have opened through runas, this SHOULD bypass all the access denied crap and give you access to alot more things...
NOTE: I did not make this script, i found it, can't remmember where though but i save dit on my comp.
Well, that's it for now... i'll post more when i ahve the time...
This is the most useful command i have learned and it can allow many holes for you to exploit further... which i will explain after this
RUNAS:
Code:
runas /user:edc2021\mstar4 cmdedc2021 is to be replaced by your server name, you can find this out at the login screen on the networked computer upon boot
mstar4 is the username, on my school computer it is MSTAR4, I'm Mat Stares, so it uses the first four letters of my last name...
WHAT THIS COMMAND WILL DO UPON EXECUTION: This command will send you into CMD using THAT person's login, but will bypass alot of the blocks the admin has set, like on my computer it allows me access to C: and cmd, which is usually blocked completely, and regedit etc...
After you have used the runas command you can further exploit the computers so that you can add everything to the startbar etc.. if it wasn't already there:
Code:
@echo off
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoStartMenuPinnedList /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoStartMenuMFUprogramsList /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoStartMenuMorePrograms /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoCommonGroups /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoWindowsUpdate /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoStartMenuMyMusic /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoSMMyPictures /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoFavoritesMenu /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoRecentDocsMenu /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoSMMyDocs /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoRecentDocsMenu /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoFavoritesMenu /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoNetworkConnections /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoStartMenuNetworkPlaces /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoSMHelp /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoFind /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoRun /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v StartMenuLogoff /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoClose /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoChangeStartMenu /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoSetTaskbar /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoPropertiesMyComputer /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoDispCpl /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoViewContextMenu /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoControlPanel /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoDesktop /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions /v NoBrowserOptions /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions /v NoBrowserBars /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions /v NoBrowserClose /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions /v NoBrowserContextMenu /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions /v NoBrowserSaveAs /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions /v NoFavorites /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions /v NoFileNew /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions /v NoFileOpen /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions /v NoFindFiles /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions /v NoSelectDownloadDir /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions /v NoNavButtons /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions /vNoPrinting /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /d 0 > NUL
echo Y|reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum /v {20D04FE0-3AEA-1069-A2D8-08002B30309D} /t REG_DWORD /d 0 > NUL
ipconfig /renew > NUL
shutdown -l -t 00 > NULACCIDENTALLY PUT OPPOSITE SCRIPT UP USE THIS ONE
Save that as a .bat using notepad then execute it using the cmd you have opened through runas, this SHOULD bypass all the access denied crap and give you access to alot more things...
NOTE: I did not make this script, i found it, can't remmember where though but i save dit on my comp.
Well, that's it for now... i'll post more when i ahve the time...
