Task 1: Hide a User from Net Listing

Step 1

• Use the Net utility to add a new local hidden user (Net was introduced in EH-07)

net user {username$} {password} /ADD

Step 2

• List all local users via the Net command. (New hidden users should not appear.)

net users

Task 2: Hide a User from WinLogon

Step 1

• Log out, and note that the backdoor user is not hidden from the WinLogon screen.

Step 2

• Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon in the registry, and create a new key named SpecialAccounts.

Step 3

• In the SpecialAccounts key, create a new key named UserList and create a DWORD value with the name of the user.