Please consider donating: https://www.corelan.be/index.php/donate/


3,193 views

Open a command prompt with system rights in Vista (and XP)

First of all, download psexec from the Microsoft website.
http://www.microsoft.com/technet/sysinternals/utilities/psexec.mspx
 
 
From and elevated/admin command prompt (cmd.exe, "run as administrator"), run psexec –s cmd.exe

  

C:\>whoami
peter

C:\>psexec -s cmd.exe

PsExec v1.83 – Execute processes remotely
Copyright (C) 2001-2007 Mark Russinovich
Sysinternals – www.sysinternals.com

Microsoft Windows [Version 6.0.6000]
Copyright (c) 2006 Microsoft Corporation.  All rights reserved.

C:\Windows\system32>whoami
nt authority\system

C:\Windows\system32>exit
cmd.exe exited on LAPTOP1 with error code 0.

C:\>
 

Type ‘exit’ to exit the "system" command prompt.
You can launch any other tool from that prompt, and it will inherit your system rights

 

© 2008 – 2021, Peter Van Eeckhoutte (corelanc0d3r). All rights reserved.

Comments are closed.

Corelan Training

We have been teaching our win32 exploit dev classes at various security cons and private companies & organizations since 2011

Check out our schedules page here and sign up for one of our classes now!

Donate

Want to support the Corelan Team community ? Click here to go to our donations page.

Want to donate BTC to Corelan Team?



Your donation will help funding server hosting.

Corelan Team Merchandise

You can support Corelan Team by donating or purchasing items from the official Corelan Team merchandising store.

Protected by Copyscape Web Plagiarism Tool

Corelan on Slack

You can chat with us and our friends on our Slack workspace:

  • Go to our facebook page
  • Browse through the posts and find the invite to Slack
  • Use the invite to access our Slack workspace
  • Categories