Sunday, 11 August 2013
Ever happened to forget your windows admin password ? or wanted to crack open some other pcs password without actually knowing it?lets see how.and remember this works only on windows pc.here i'm gonna change a windows 7 password.
- You ae gonna need a windows 7 bootable disk image or a installation dvd whatever you might call it.
- Here we are gonna use the sethc.exe file which is related to windows sticky key configuration to remove the password.
- First insert the dvd into the dvd drive and boot from the dvd, [ don't panic,we are NOT gonna install windows again ;) ]
- Press any key and wait for windows to load some files and then the installation window appears.
- Select your language,click next
- And in the next window,select repair my computer which lies to the bottom left of your window
- wait a while untill windows checks for the available windows installations,
- my previous win7 os was installed on d drive,so select y\it,probably yourz gonna be on the c drive,it doesn't make much difference,
- Select your os and click next.
- now,if the below window appears,you are doing it right or else you might wanna go back and check your steps once again
- Select command prompt and then a command prompt window appears.
- before going further,lets just see what we are up to,here we are trying to replace the sethc.exe with the cmd.exe so that when triggered,it gives us command prompt instead of the sticky key manager
- First we will copy the cmd.exe from the windows folder into some other folder,also will copy sethc.exe we are gonna need them later.now after getting a back up of the above two files,we are gonna replace sethc.exe with the cmd.exe.we have to do it through command line.
- now,lets get back.enter the following command into your command prompt
copy c:\windows\system32\sethc.exe c:\
- it copies sethc.exe to c:\,and remember my drive is d,so i used d instead of c
- now similarly copy cmd.exe to c:\ by using the following command
copy c:\windows\system32\cmd.exe c:\
- Now lets replace the sethc.exe with cmd.exe in system 32.it can be done by using the below command
copy c:\cmd.exe c:\windows\system32\sethc.exe
- It prompts for an over write,type y and press enter
- now type exit then the command prompt closes,click restart and this this time allow windows to boot from the hard disk,you can even remove the dvd if you want to.
- There comes our normal boot screen,everything seems to be the same,but its not!
- now repeatedly hit shift key 5 times,and vola! a command prompt pops up.
- Now in the command prompt type the following command,
net user krishna *
- and you must replace krishna with your account name,for example if your account name is sam,the command goes like "net user sam *"
- now it prompts for a new password,enter it ( remember it atleast this time :P ) and it will not display any stars or anything as you type in your password.it prompts for password again,enter the same password again.and you are done.now you can log in with your new password.
you can also take a look at this simple video tutorial :)
