Vista - Login in Windows Vista Ultimate without and credentials

There is a serious bug found in Windows Vista Ultimate, which allow the user
to login in to Window Vista System without providing any credential. It just
requires the attacker to access the victim system, for the first time. To
gain access to victim system, follow these steps.

1) Open System32 folder of your windows.
2) Copy Cmd.exe, Magnify.exe and paste it in two different locations, for
safety purpose.
3) Rename the cmd.exe to Magnify.exe on the backup location.
4) Copy & paste the renamed cmd.exe to system32 folder, this asks for
replacing the Magnify.exe, just continue with replacing.
5) Now restart the system.
6) After restarting the system, the login screen will come, now select the
utility manager, which is on the below left on the screen.
7) Now check the Magnify check box, to open the Magnify.exe, but now this
will open the cmd.exe.
7) In the command prompt, just type the explorer.exe, this will open the
explorer.exe, and desktop, without login in to the system. The user account
provided for login is the system account, so u can do anything with the
system.
You can also play with the windows registry, services, user account change,
and deletion of user accounts, anything you want.


I don’t understand why Microsoft is failed to look in to simple problems.
This is the simplest way to hack the windows vista, without any hacking
knowledge.

That's assuming that the victim's pc is turned on and logged in. In which
case, the "attacker" already has access. No need for stupid hacks.

--
Jane, not plain 64 bit enabled :-)
Batteries not included. Braincell on vacation ;-)
"Abhishek Choudhary" <AbhishekChoudhary@discussions.microsoft.com> wrote in
message news:8E08DD22-5B00-43EA-959E-68CD7A6835D1@microsoft.com...
> There is a serious bug found in Windows Vista Ultimate, which allow the
> user
> to login in to Window Vista System without providing any credential. It
> just
> requires the attacker to access the victim system, for the first time. To
> gain access to victim system, follow these steps.
>
> 1) Open System32 folder of your windows.
> 2) Copy Cmd.exe, Magnify.exe and paste it in two different locations, for
> safety purpose.
> 3) Rename the cmd.exe to Magnify.exe on the backup location.
> 4) Copy & paste the renamed cmd.exe to system32 folder, this asks for
> replacing the Magnify.exe, just continue with replacing.
> 5) Now restart the system.
> 6) After restarting the system, the login screen will come, now select the
> utility manager, which is on the below left on the screen.
> 7) Now check the Magnify check box, to open the Magnify.exe, but now this
> will open the cmd.exe.
> 7) In the command prompt, just type the explorer.exe, this will open the
> explorer.exe, and desktop, without login in to the system. The user
> account
> provided for login is the system account, so u can do anything with the
> system.
> You can also play with the windows registry, services, user account
> change,
> and deletion of user accounts, anything you want.
>
>
> I don’t understand why Microsoft is failed to look in to simple problems.
> This is the simplest way to hack the windows vista, without any hacking
> knowledge.
>
>

"Abhishek Choudhary" <AbhishekChoudhary@discussions.microsoft.com> wrote in
message news:8E08DD22-5B00-43EA-959E-68CD7A6835D1@microsoft.com...
> There is a serious bug found in Windows Vista Ultimate, which allow the
> user
> to login in to Window Vista System without providing any credential. It
> just
> requires the attacker to access the victim system, for the first time. To
> gain access to victim system, follow these steps.
>
> 1) Open System32 folder of your windows.
> 2) Copy Cmd.exe, Magnify.exe and paste it in two different locations, for
> safety purpose.
> 3) Rename the cmd.exe to Magnify.exe on the backup location.
> 4) Copy & paste the renamed cmd.exe to system32 folder, this asks for
> replacing the Magnify.exe, just continue with replacing.
> 5) Now restart the system.
> 6) After restarting the system, the login screen will come, now select the
> utility manager, which is on the below left on the screen.
> 7) Now check the Magnify check box, to open the Magnify.exe, but now this
> will open the cmd.exe.
> 7) In the command prompt, just type the explorer.exe, this will open the
> explorer.exe, and desktop, without login in to the system. The user
> account
> provided for login is the system account, so u can do anything with the
> system.
> You can also play with the windows registry, services, user account
> change,
> and deletion of user accounts, anything you want.
>
>
> I don’t understand why Microsoft is failed to look in to simple problems.
> This is the simplest way to hack the windows vista, without any hacking
> knowledge.
>

This is not a hack - to perform the steps you outline below you have to
already have physical access to the PC and be able to logon locally or
remotely with sufficient credentials to perform all the steps you outline
replacing files in system32 etc.. In which case you have already
compromised the system
This is not a hack as the compromise has to already be done prior to your
trivial example of throwing a command prompt under system context which has
been a know ability by many other methods on Windows NT/2000/XP/2003 systems
since day one.

This is a none issue.
--
Mike Brannigan

>

I am unsure where to post this message, so I will try here first. A virus
destroyed my XP operating system, so I bought Vista Home, since I am a
student on a budget. However, without even using it, the system fails to
activate because my product key is in use. How is this possible, if I
purchased it and was the only person to activate using it? Would this affect
my computer or any future networks?

If you let someone have physical access to your computer, they already own
it. The rest is window dressing.

"Abhishek Choudhary" <AbhishekChoudhary@discussions.microsoft.com> wrote in
message news:8E08DD22-5B00-43EA-959E-68CD7A6835D1@microsoft.com...
> There is a serious bug found in Windows Vista Ultimate, which allow the
> user
> to login in to Window Vista System without providing any credential. It
> just
> requires the attacker to access the victim system, for the first time. To
> gain access to victim system, follow these steps.

This is both the wrong place and the wrong way to post a question. When you
post in an existing discussion folks assume your post has something to do
with the existing discussion, which yours does not. And they assume you're
replying to/adding to an ongoing discussion, which you aren't.

Anyway, call the telephone activation center. Since we don't know where you
got your copy of Vista it may or may not be legitimate. The telephone
activation center will help you sort it all out.

"WHIM1987" <WHIM1987@discussions.microsoft.com> wrote in message
news:2F8A67F5-6562-48C8-B740-B24B6EA3E56D@microsoft.com...
>I am unsure where to post this message, so I will try here first. A virus
> destroyed my XP operating system, so I bought Vista Home, since I am a
> student on a budget. However, without even using it, the system fails to
> activate because my product key is in use. How is this possible, if I
> purchased it and was the only person to activate using it? Would this
> affect
> my computer or any future networks?

LOL. During the beta I'd see reports of supposed security flaws where the
first required step was to log into the system Administrator account (not
even a local administrator account). I mean, - duh - if you're logged in as
system Administrator, you can do anything you want ayway.


"Richard G. Harper [MVP Shell/User]" <rgharper@gmail.com> wrote in message
news:29DAF786-DD87-4CDD-A351-87E676DE666E@microsoft.com...
> If you let someone have physical access to your computer, they already own
> it. The rest is window dressing.
>
> "Abhishek Choudhary" <AbhishekChoudhary@discussions.microsoft.com> wrote
> in message news:8E08DD22-5B00-43EA-959E-68CD7A6835D1@microsoft.com...
>> There is a serious bug found in Windows Vista Ultimate, which allow the
>> user
>> to login in to Window Vista System without providing any credential. It
>> just
>> requires the attacker to access the victim system, for the first time. To
>> gain access to victim system, follow these steps.
>

A better hack: Log in as administrator. (requirement for hack below)

There you go! You have admin access!

--
Dustin Harper
dharper@vistarip.com
http://www.vistarip.com

--
"Abhishek Choudhary" <AbhishekChoudhary@discussions.microsoft.com> wrote in
message news:8E08DD22-5B00-43EA-959E-68CD7A6835D1@microsoft.com...
> There is a serious bug found in Windows Vista Ultimate, which allow the
> user
> to login in to Window Vista System without providing any credential. It
> just
> requires the attacker to access the victim system, for the first time. To
> gain access to victim system, follow these steps.
>
> 1) Open System32 folder of your windows.
> 2) Copy Cmd.exe, Magnify.exe and paste it in two different locations, for
> safety purpose.
> 3) Rename the cmd.exe to Magnify.exe on the backup location.
> 4) Copy & paste the renamed cmd.exe to system32 folder, this asks for
> replacing the Magnify.exe, just continue with replacing.
> 5) Now restart the system.
> 6) After restarting the system, the login screen will come, now select the
> utility manager, which is on the below left on the screen.
> 7) Now check the Magnify check box, to open the Magnify.exe, but now this
> will open the cmd.exe.
> 7) In the command prompt, just type the explorer.exe, this will open the
> explorer.exe, and desktop, without login in to the system. The user
> account
> provided for login is the system account, so u can do anything with the
> system.
> You can also play with the windows registry, services, user account
> change,
> and deletion of user accounts, anything you want.
>
>
> I don’t understand why Microsoft is failed to look in to simple problems.
> This is the simplest way to hack the windows vista, without any hacking
> knowledge.
>
>