Tuesday, 1 September 2015

Windows Black Belt troubleshooting videos

Want to learn some neat tricks on how to gain full Admin access to a Windows system and be able to work with full user rights?

Watch Win 8.1 TechEd video.
  • Use Intel vPro for remote control.
  • Boot from a Win8.1 Install DVD to hack repair a system by replacing \Windows\System32\sethc.exe.
  • Use robocopy to copy system files that Windows won't even allow an Admin account user to copy due to ACL problems (time @0:41:0)
  • Use Sysinternals psexes -sid cmd.exe to get full access rights (@0:42:0)
  • Debug problems by looking at threads not processes using Sysinternals Process Explorer (procexp)  (@0:45:0)
  • Use TAKEOWN.exe or robocopy /B to access 'difficult' files (@0:54:0)
  • Use iCacls /SetIntegrityLevel
  • Check your admin level using whoami /groups (@0:55:30)
  • Info on using Windows RE (recovery environment) (@1:0:0)
  • How to use MSconfig.exe,  Sysinternals Autoruns.exe, 
  • Turn on highly detailed error messages (@1:06:00)
  • Logon without logging on! (@1:08:0)
There is also a Windows 10 Black Belt session.