Trick to recover administrator password through guest login

We ever wanted to login to our college computer with administrator account so that we can download with full speed and full rights, or just wanted to know the friend’s computer password and to make him gawk when we tell our success story of hacking. Well, there is a great way of recovering an administrator account from a guest account by which we can reset the administrator password and get all the privileges an administrator enjoys on windows.

The basic concept behind this trick is that when we press shift key 5 times and the sticky key dialog shows up. This works even at the login screen. But if we replace the sethc.exe which is responsible for the sticky key dialog, with cmd.exe i.e. Command prompt and then call sethc.exe by pressing shift key 5 times at login screen, we will get a command prompt with administrator privileges because no user has logged on. From there we can recover the administrator password, even from a guest account.

There are two methods of recovering administrator password:

Method 1

By changing administrator password.

To do this follow these simple steps:

• From the guest account go to c:/windows/system32.

• Copy cmd.exe and paste it on desktop.

• Rename cmd.exe to sethc.exe.

• Copy the new sethc.exe to system 32, when windows asks for overwriting the file, click yes.

• Now logout from the guest account and at the user select window, press shift key 5 times.

• Instead of sticky key confirmation dialog, command prompt with full administrator privileges will open.

• Now type “net user administrator aaa" where “aaa" can be any password we like and press enter.

• Now the command would completed successfully and then exit the command prompt and login into administrator with the new password.

• Congrats the administrator account has been recovered through guest account. 

Method 2

Without changing password.

To do this follow these steps:

• Create a new user at the command prompt by typing “net user hack /add" where "hack" is the username to add with administrator privileges.

• Hide the newly created administrator account by going to registry editor and navigate to this key.

Hkey_local_machine\software\microsoft\windows nt\currentversion\winlogon\specialaccounts\userlist

• Create a new "dword value", write its name as the “hack".

• Now live with the administrator account forever.

Note: for the ones who are having problems with step one, use a live version of Linux. Copy the cmd.exe to a flash drive. Boot into Linux and copy the cmd.exe to the file that needs to be replaced. In Linux we can bypass those read / write permissions.

There is also another Trick of recovering Windows Login password, have look over this Trick here:

• Trick to recovering Windows login password

Not only this you can also use another Trick of recovering Windows Login password using command prompt, have look over this Trick here:

• Trick to recover Windows XP administrator password using command prompt

So these were the simple tricks to recovering administrator password through guest login.