I have physical access to somebody's work PC. What now?

I'm not sure if this thread belongs to /sec/, but I'll ask anyway. Let's say that I have physical access to some other person's PC (laptop running Windows XP). Let's say that it's not his personal computer, but it's for work related stuff and it runs some kind of tech project for a state owned company. Let's say that I would not mind to fuarrrk with this organisation. I have two questions: 1) Any ideas how do I get through the login screen on Windows XP? 2) What do I do when I finally get in? What's the best way to fuarrrk with this company? Any ideas where to get malware and stuffl ike that?

>1) Get Kali, or any linux system, on a USB. As long you can modify a certain file that contains the window's password by booting in an OS and modify the HDD files. Quick goog- no duckduckgo will show you the way >2) get creative lol

>1) Any ideas how do I get through the login screen on Windows XP? There alot of ways to get passed a xp screen, easiest if you have physical access is ophcrack https://ophcrack.sourceforge.io/ >2) What do I do when I finally get in? What's the best way to fuarrrk with this company? Any ideas where to get malware and stuffl ike that? Look up any basic post exploitation guide on the internet. Don't cry when you get caught op. Companies have camera's and logs everywhere.

>>18938 > ophcrack Thanks. That should be useful. > Companies have camera's and logs everywhere Not the one I work for

>>18938 >>18942 just change his background to a spicy meme and leave it alone

>>18948 *Changes default text font to Wingdings*

Any updates OP? We are waiting on the edge of our seats?

I was going to tell you how but honestly, if you have to ask what to do when you get in, then you shouldn't bother and I shouldn't tell you how to get in even as easy as it would be to get SYSTEM permissions. The reason is, there's a lot for you to learn before you start trying to fuarrrk with a company. I could tell you how to get a persistent backdoor but what is the point when you don't really have the knowledge to do anything with the access? Your best course of action would be to sell access into their network to a ransomware operator so they could deploy their kit. If that is what you want to do: https://mashtips.com/how-to-edit-the-windows-registry-using-ubuntu/ https://blog.compass-security.com/2018/02/no-need-to-break-in-use-the-backdoor/ read these two and that should tell you enough to get SYSTEM permissions. From there, you just need the ransomware operator to provide a dropper for you to download via powershell https://4sysops.com/archives/use-powershell-to-download-a-file-with-http-https-and-ftp/ Then execute the dropper and let them have fun with it, get your monero and get the fuarrrk out of town.

>>18997 I should probably also mention that running powershell is a red flag for any logging purposes so it would get traced back to when you had physical access to the device so ultimately not a good idea to pursue this. Though I don't remember if XP came with powershell, I don't think it came with it natively but if that's the case you can hook up a USB drive and mount it with diskpart and then run the dropper from the USB. Either way, it will be forensically tracked back to you so when I say get the fuarrrk out of town I'm not joking. https://neosmart.net/wiki/diskpart/#Commands_and_parameters

>>18997 Oh yeah and if they are using passwordless disk encryption like Check Point's full disk encryption, then accessing it from a linux live boot won't really work, but then again neither will trying to load ophcrack because it won't be able to access to SAM database. Another option would be to use something like https://shop.hak5.org/products/o-mg-cable-usb-a and ask them to let you charge your phone while they are logged in, but again you'd need to have scripts built to accomplish the task you want, it isn't really something you just do on the fly unless you already have payloads set up for a variety of environments and even then there could be controls in place that break your method of establishing a foothold.