Microsoft's system-wide hidden account vulnerability

  
        Detailed description:
You can create a hidden account through the blank characters in V9 in the intelligent ABC input method. You cannot create a command line. You can write a batch first, as follows: net user 123 /addnet localgroup administrators /add Note Blank characters. Non-spaces. After the command line is created, use the net user command to view the account display as blank, and also display blank in the user interface. After creating this account, you cannot directly enter the login in mstsc, you need to select the option panel in the remote desktop. In the User Name column of the General tab, enter the special characters with Smart ABC's V9 and connect again.
Vulnerability Certificate:
Create a new batch with the following contents. .net user 123 /addnet localgroup administrators /add After the execution, check the user management interface to see if there is a blank account.
Note that this space is not 0x20, but 0xA9+0xA1.

Copyright © Windows knowledge All Rights Reserved