{"id":262,"date":"2024-03-23T07:23:37","date_gmt":"2024-03-23T07:23:37","guid":{"rendered":"https:\/\/people.utm.my\/abdulghafar\/?page_id=262"},"modified":"2025-04-18T01:27:31","modified_gmt":"2025-04-18T01:27:31","slug":"create-forged-user-account-windows-operating-system","status":"publish","type":"page","link":"https:\/\/people.utm.my\/abdulghafar\/create-forged-user-account-windows-operating-system\/","title":{"rendered":"Ethical Hacking 3: Create Forged User Account &#8211; Windows Operating System"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Introduction<\/strong>:<br>This technique aims to teach students how to access a victim machine illegally through a remote desktop connection. This technique allows students to penetrate Windows Operating System without depending on payload clicks by users (If the access is through Microsoft RDP). The forged user account must be created during an active backdoor session and use a complex password to create the account successfully. <strong>Note<\/strong>: One Meterpreter session must remain active.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Disclaimer:<\/strong> <strong>This article is suitable for intermediate and expert users and only for education.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">a) Command: run getgui -e -u -p<br>b) Example: run getgui -e -u netadmin -p P@ssw0rd<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"757\" height=\"250\" src=\"https:\/\/people.utm.my\/abdulghafar\/wp-content\/uploads\/sites\/3106\/2024\/03\/Capture-16.jpg\" alt=\"\" class=\"wp-image-267\" srcset=\"https:\/\/people.utm.my\/abdulghafar\/wp-content\/uploads\/sites\/3106\/2024\/03\/Capture-16.jpg 757w, https:\/\/people.utm.my\/abdulghafar\/wp-content\/uploads\/sites\/3106\/2024\/03\/Capture-16-300x99.jpg 300w\" sizes=\"auto, (max-width: 757px) 100vw, 757px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Note<\/strong>: New user successfully created and automatically be part of the administrator group<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"222\" src=\"https:\/\/people.utm.my\/abdulghafar\/wp-content\/uploads\/sites\/3106\/2024\/03\/Capture-17-1024x222.jpg\" alt=\"\" class=\"wp-image-268\" srcset=\"https:\/\/people.utm.my\/abdulghafar\/wp-content\/uploads\/sites\/3106\/2024\/03\/Capture-17-1024x222.jpg 1024w, https:\/\/people.utm.my\/abdulghafar\/wp-content\/uploads\/sites\/3106\/2024\/03\/Capture-17-300x65.jpg 300w, https:\/\/people.utm.my\/abdulghafar\/wp-content\/uploads\/sites\/3106\/2024\/03\/Capture-17-768x167.jpg 768w, https:\/\/people.utm.my\/abdulghafar\/wp-content\/uploads\/sites\/3106\/2024\/03\/Capture-17.jpg 1070w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Note<\/strong>:<br>1) Use the complex password to add the user.<br>2) Access to the target machine through Microsoft Remote Desktop or through Metasploit module.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Updated: <\/p>\n\n\n<div class=\"wp-block-post-date__modified-date wp-block-post-date\"><time datetime=\"2025-04-18T01:27:31+00:00\">April 18, 2025<\/time><\/div>","protected":false},"excerpt":{"rendered":"<p>Introduction:This technique aims to teach students how to access a victim machine illegally through a remote desktop connection. This technique allows students to penetrate Windows Operating System without depending on payload clicks by users (If the access is through Microsoft RDP). The forged user account must be created during an active backdoor session and use [&hellip;]<\/p>\n","protected":false},"author":25922,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-262","page","type-page","status-publish","hentry","entry"],"_links":{"self":[{"href":"https:\/\/people.utm.my\/abdulghafar\/wp-json\/wp\/v2\/pages\/262","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/people.utm.my\/abdulghafar\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/people.utm.my\/abdulghafar\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/people.utm.my\/abdulghafar\/wp-json\/wp\/v2\/users\/25922"}],"replies":[{"embeddable":true,"href":"https:\/\/people.utm.my\/abdulghafar\/wp-json\/wp\/v2\/comments?post=262"}],"version-history":[{"count":11,"href":"https:\/\/people.utm.my\/abdulghafar\/wp-json\/wp\/v2\/pages\/262\/revisions"}],"predecessor-version":[{"id":297,"href":"https:\/\/people.utm.my\/abdulghafar\/wp-json\/wp\/v2\/pages\/262\/revisions\/297"}],"wp:attachment":[{"href":"https:\/\/people.utm.my\/abdulghafar\/wp-json\/wp\/v2\/media?parent=262"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}