Re: Password Decoding
- From: comphelp@xxxxxxxxx (Todd H.)
- Date: 29 Nov 2006 17:49:38 -0600
"Chris Suckling" <csba17084@xxxxxxxxxxxxxxxx> writes:
I would like to know if there is a way of decoding a password which has been
set up using microsoft windows XP within a laptop that i have recently
purchased through an auction, (have authority from the company to prove
authenticity).... If there is anyone that can provide me with software or
let me know what sort of software that can be used for this program to find
out whether there is anything untoward on the laptop please let me
know.....
Can you describe what specifically you're attempting to do and why you
don't just reinstall windows? I certainly wouldn't trust whatever
isntallation you've got there.
Now, there are utilities to reset administrator passwords on nt boxes
using bootable media (ntpasswd among them).
Another way to go would be to boot with Knoppix disk and pull the
SYSTEM and SAM file off the disk, dump the SYSKEY and then use that to
dump the password hashes and run them through rcrack with rainbow
tables to decode the current password. This would be the way to go if
there are any EFS protected volumes on the disk you'd like to have a
chance to recover since you need the original account password in
place to have a shot at recovering those. If rcrack and the tables
you have won't crack the password though (would have to be an
unusually tought pw to get past some of the larger rainbow tables),
you'll have no joy there.
Irongeek's got a decent local access tutorial on the process:
http://www.irongeek.com/i.php?page=security/localsamcrack2
--
Todd H.
http://www.toddh.net/
.
- Follow-Ups:
- Re: Password Decoding
- From: Gerard Bok
- Re: Password Decoding
- References:
- Password Decoding
- From: Chris Suckling
- Password Decoding
- Prev by Date: Re: Password Decoding
- Next by Date: Re: Password Decoding
- Previous by thread: Re: Password Decoding
- Next by thread: Re: Password Decoding
- Index(es):
Relevant Pages
|
