Windows 7 administrator privilege acquisition

Copy the following content to a registry configuration file ending with. Reg, and double-click it to run it:

 

Windows Registry Editor Version 5.00

[Hkey_classes_root/*/Shell/RunAs]
@ = "Get administrator permissions"
"Noworkingdirectory" = ""
[Hkey_classes_root/*/Shell/RunAs/command]
@ = "Cmd.exe/C takeown/f/" % 1/"& icacls/" % 1/"/grant administrators: F"
"Isolatedcommand" = "cmd.exe/C takeown/f/" % 1/"& icacls/" % 1/"/grant administrators: F"
[Hkey_classes_root/exefile/Shell/runas2]
@ = "Get administrator permissions"
"Noworkingdirectory" = ""
[Hkey_classes_root/exefile/Shell/runas2/command]
@ = "Cmd.exe/C takeown/f/" % 1/"& icacls/" % 1/"/grant administrators: F"
"Isolatedcommand" = "cmd.exe/C takeown/f/" % 1/"& icacls/" % 1/"/grant administrators: F"

[Hkey_classes_root/directory/Shell/RunAs]
@ = "Get administrator permissions"
"Noworkingdirectory" = ""
[Hkey_classes_root/directory/Shell/RunAs/command]
@ = "Cmd.exe/C takeown/f/" % 1/"/R/d y & icacls/" % 1/"/grant administrators: F/T"
"Isolatedcommand" = "cmd.exe/C takeown/f/" % 1/"/R/d y & icacls/" % 1/"/grant administrators: F/T"

 

 

 

From http://www.gzjsk.com/Article/ShowArticle.asp? ArticleID = 406