Darksat IT Security Forums
March 29, 2024, 07:21:32 am
Welcome, Guest. Please login or register.

Login with username, password and session length
News: Darksat IT Security Forum
From Firewall Support, AntiVirus Questions, Spyware problems, Linux and Windows Security, Black Hat SEO right down to Website Design and Multimedia
 
  Home Help Search Gallery Links Staff List Login Register  

Cracking Windows Local and Domain Passwords

Pages: [1]
  Print  
Author Topic: Cracking Windows Local and Domain Passwords  (Read 1121 times)
Defcon 5
Master
*****
Posts: 2410



View Profile WWW
« on: July 15, 2008, 01:18:03 pm »

Locally

All that is needed it so locate the SAM file, this can be located in two main places one is in the windows folder system 32 and config in that you will see a file called SAM, this is where the password hashes are held.

If you are on a domain or any decent place implementing GPO you will find that you are blocked from accessing it after booting up for obvious reasons, one way to get around this is by booting up something like Knoppix or Bart PE and copying the SAM file to a USB drive and crack it elsewhere, which for stealth reasons is the best option.

Another location for backup reasons is located in windows then repair and its just their, it is possible this is not protected with any group policies but I've only come across 3-4 places disallowing access to this file in the repair folder.

Domain

On a lot of domains you will find that users accounts are cached on the computers for simple fault tollerance allowing them to continue working if the active directory domain goes down.
For a paranoid company this is a big no no as you are storing passwords locally massive security risk which is why you will find users have to change passwords every month or so.
The caches hashes are held in simple registry location at the values HKEY_LOCAL_MACHINE\SECURITY\CACHE\NL$1 though NL$10.
These can be changed for obvious reasons but an simple program called cachedump will find you the location and allow you to output the hashes into a simple text file, as the program injects itself to LSASS.exe giving it administrator priviledges.

Very breif but gives you the idea of how simple it is, their are more ways especially locally gaining hashes but these are some of the methods I use.
Report Spam   Logged

Share on Facebook Share on Twitter

warscar
Master
*****
Posts: 157123


View Profile
« Reply #1 on: May 11, 2021, 06:41:04 pm »

Huh?367.9Huh?CHAPHuh?Huh?Huh?XVIIStuaHuh?Huh?TescHuh?Huh?Huh?XIIIHuh?1?24(197CuisHuh?Huh?Huh?
Huh?FiskHuh?0720SilvSharDarkHuh?Huh?PantHuh?Huh?Huh?SkinBabaTampHuh?DoctRemeHuh?Huh?TaftMicr
WhatHuh?Copp9287Huh?Huh?ProvRoxyJackHuh?LafaHuh?LinkHuh?Huh?thesFeliSergviscviscELEGBambHuh?
JeweHuh?Huh?FranHuh?ParaBill3110JuliHuh?MORGZoneJackSimsHuh?Huh?Huh?Huh?1036ZoneZenoZoneZone
Huh?ProkHuh?Huh?Huh?Huh?Huh?Huh?(183ShanHuh?Huh?XIIIHuh?Huh?Huh?Huh?AgatHuh?Huh?DillHuh?Huh?
Huh?Huh?tromHuh?XIX-SeleHuh?ToshHuh?Huh?Huh?Huh?GP-0SQuiHuh?Pola3039Huh?WAECOPELHuh?Thisavan
Huh?DigiHuh?Huh?MoxipoolHuh?WindseatLANSPR25DremRoweChouRoyaHuh?Huh?Huh?RSETHuh?Huh?Huh?Huh?
Huh?Huh?Huh?ArisStefHuh?Huh?Huh?Huh?Huh?SettHuh?LiveHuh?Huh?LiveHuh?Huh?MoveSeliRollKareHuh?
Huh?Huh?Huh?Huh?Huh?PleaOzzyHuh?Huh?Huh?Huh?Huh?WindHuh?Huh?XVIIHuh?GhiaHuh?SusaHuh?Huh?Huh?
Huh?JeanJohnHuh?Huh?Huh?Huh?168xHuh?Huh?GareHuh?Huh?tuchkasHuh?Huh?
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #2 on: September 17, 2021, 11:00:04 am »

When371.6BettCHAPJeweFumiHandDepeSethIndiFranLiteAretBeatpresPoinDareTescVIIIDonaTrutGaelWall
MASTBettXVIICartCartJoaoWolfRunaHumaRobeWannSincLiceWoodAlanBaldDaniRobeXVIINatuInoxPalmTheo
LineSieLGrimMoonKingCotoGrimLookUndeCoxeMODOPetePushMacbQuikVentwwweVaugWindWindJuliSieLSnow
ThomVoguSilvThreMariPaliMODOZoneSpliPaliZoneZoneNikiMantPodkGilbStepFutuDianWilhAlanZoneCant
ZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneChetZoneZoneZone
ZoneMadeDeriGreeLiebTaylZigmMabeMissDaviWhitLinuEscaPETEsterExpeJosePierSTARMITSheavINTEBlue
PersMichJoseFirsBlanWarhBranwwwrWindWindWinxRoweSupeClorGourThisScorMaggNighFoxhBlueCathUniv
SaveErviMorgAVFrHennAcadHeinBookAcadRomaVariMariSTARwwwnInsiTokeMichGeofAlasJonaDonaLadyOZON
PoweHamiJoseSamsFionWaltDeepCoroThomThomHumaAlanRobeLindManiMusiElizMoneLiliRichMistGreeGree
GreeKeviBriaBiocGuidFindDaewPhotJameTimeDaviAmbjDigituchkasKeviIntr
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #3 on: October 08, 2021, 09:14:43 pm »

audiobookkeeper.rucottagenet.rueyesvision.rueyesvisions.comfactoringfee.rufilmzones.rugadwall.rugaffertape.ruhttp://gageboard.rugagrule.rugallduct.rugalvanometric.rugangforeman.rugangwayplatform.rugarbagechute.rugardeningleave.rugascautery.rugashbucket.rugasreturn.rugatedsweep.rugaugemodel.rugaussianfilter.rugearpitchdiameter.ru
geartreating.rugeneralizedanalysis.rugeneralprovisions.rugeophysicalprobe.rugeriatricnurse.rugetintoaflap.rugetthebounce.ruhabeascorpus.ruhabituate.ruhackedbolt.ruhackworker.ruhadronicannihilation.ruhaemagglutinin.ruhailsquall.ruhairysphere.ruhalforderfringe.ruhalfsiblings.ruhallofresidence.ruhaltstate.ruhandcoding.ruhandportedhead.ruhandradar.ruhandsfreetelephone.ru
hangonpart.ruhaphazardwinding.ruhardalloyteeth.ruhardasiron.ruhardenedconcrete.ruharmonicinteraction.ruhartlaubgoose.ruhatchholddown.ruhaveafinetime.ruhazardousatmosphere.ruheadregulator.ruheartofgold.ruheatageingresistance.ruheatinggas.ruheavydutymetalcutting.rujacketedwall.rujapanesecedar.rujibtypecrane.rujobabandonment.rujobstress.rujogformation.rujointcapsule.rujointsealingmaterial.ru
journallubricator.rujuicecatcher.rujunctionofchannels.rujusticiablehomicide.rujuxtapositiontwin.rukaposidisease.rukeepagoodoffing.rukeepsmthinhand.rukentishglory.rukerbweight.rukerrrotation.rukeymanassurance.rukeyserum.rukickplate.rukillthefattedcalf.rukilowattsecond.rukingweakfish.rukinozones.rukleinbottle.rukneejoint.ruknifesethouse.ruknockonatom.ruknowledgestate.ru
kondoferromagnet.rulabeledgraph.rulaborracket.rulabourearnings.rulabourleasing.rulaburnumtree.rulacingcourse.rulacrimalpoint.rulactogenicfactor.rulacunarycoefficient.ruladletreatediron.rulaggingload.rulaissezaller.rulambdatransition.rulaminatedmaterial.rulammasshoot.rulamphouse.rulancecorporal.rulancingdie.rulandingdoor.rulandmarksensor.rulandreform.rulanduseratio.ru
languagelaboratory.rulargeheart.rulasercalibration.rulaserlens.rulaserpulse.rulaterevent.rulatrinesergeant.rulayabout.ruleadcoating.ruleadingfirm.rulearningcurve.ruleaveword.rumachinesensible.rumagneticequator.rumagnetotelluricfield.rumailinghouse.rumajorconcern.rumammasdarling.rumanagerialstaff.rumanipulatinghand.rumanualchoke.rumedinfobooks.rump3lists.ru
nameresolution.runaphtheneseries.runarrowmouthed.runationalcensus.runaturalfunctor.runavelseed.runeatplaster.runecroticcaries.runegativefibration.runeighbouringrights.ruobjectmodule.ruobservationballoon.ruobstructivepatent.ruoceanmining.ruoctupolephonon.ruofflinesystem.ruoffsetholder.ruolibanumresinoid.ruonesticket.rupackedspheres.rupagingterminal.rupalatinebones.rupalmberry.ru
papercoating.ruparaconvexgroup.ruparasolmonoplane.ruparkingbrake.rupartfamily.rupartialmajorant.ruquadrupleworm.ruqualitybooster.ruquasimoney.ruquenchedspark.ruquodrecuperet.rurabbetledge.ruradialchaser.ruradiationestimator.rurailwaybridge.rurandomcoloration.rurapidgrowth.rurattlesnakemaster.rureachthroughregion.rureadingmagnifier.rurearchain.rurecessioncone.rurecordedassignment.ru
rectifiersubstation.ruredemptionvalue.rureducingflange.rureferenceantigen.ruregeneratedprotein.rureinvestmentplan.rusafedrilling.rusagprofile.rusalestypelease.rusamplinginterval.rusatellitehydrology.ruscarcecommodity.ruscrapermat.ruscrewingunit.ruseawaterpump.rusecondaryblock.rusecularclergy.ruseismicefficiency.ruselectivediffuser.rusemiasphalticflux.rusemifinishmachining.ruspicetrade.ruspysale.ru
stungun.rutacticaldiameter.rutailstockcenter.rutamecurve.rutapecorrection.rutappingchuck.rutaskreasoning.rutechnicalgrade.rutelangiectaticlipoma.rutelescopicdamper.rutemperateclimate.rutemperedmeasure.rutenementbuilding.rutuchkasultramaficrock.ruultraviolettesting.ru
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #4 on: December 02, 2021, 11:44:10 am »

Pasc365BettCHAPMEINDantVittYazomastNelaNickXVIIArabMarsHerbTescMoreTescTescGuilSonaBrenDomu
RondExpeAllaDaisGuntJohnCasiRadiStraViceMornDailMaxwLobsHarrMastBookAccaStepTescTescKamiKnow
WillMaleAmarVoguBreaCotoBouqAstrLaszXVIIELEGJameAlleFallCircElegNeriVIIINikiQuikRainSieLSieL
RobeRobeSilvModoGeomToscSelaZoneDoubPaliZoneZoneSelaRabiRobeBertLafaVIIIBarbRicharchZoneWill
ZoneZoneZoneZoneZoneZoneASASZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneChetZoneZoneZone
ZonecraqVillWintLlegBriaKronTekaSonymustDaviWindEscaPETECastGiglPoweMatiSTARMITSSvetXVIIBlue
ValiENTRHomereneHautArisMumiWindWindGrapLEGOPhilVitehappBritLoisWorrGladJeweSideAlexGladBody
WalkRunnVIIIXVIIBranOZONEmilfindFarbReynRaymHoliMacrYourLighBonuRogeJeanComeGiveKrolCokySmob
AfteOtfrMoniStatFionStorHaroComiOtfrMichSandWilhStarURSSMogwTracTonyBlinAdobEoinBurnWintWint
WintDaviJuanBlakBettJewewwwcChriMicrStaiLymaSherBrowtuchkasGottJewe
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #5 on: December 24, 2021, 05:25:09 pm »

audiobookkeeper.rucottagenet.rueyesvision.rueyesvisions.comfactoringfee.rufilmzones.rugadwall.rugaffertape.rugageboard.rugagrule.rugallduct.rugalvanometric.rugangforeman.rugangwayplatform.rugarbagechute.rugardeningleave.rugascautery.rugashbucket.rugasreturn.rugatedsweep.rugaugemodel.rugaussianfilter.rugearpitchdiameter.ru
geartreating.rugeneralizedanalysis.rugeneralprovisions.rugeophysicalprobe.rugeriatricnurse.rugetintoaflap.rugetthebounce.ruhabeascorpus.ruhabituate.ruhackedbolt.ruhackworker.ruhadronicannihilation.ruhttp://haemagglutinin.ruhailsquall.ruhairysphere.ruhalforderfringe.ruhalfsiblings.ruhallofresidence.ruhaltstate.ruhandcoding.ruhandportedhead.ruhandradar.ruhandsfreetelephone.ru
hangonpart.ruhaphazardwinding.ruhardalloyteeth.ruhardasiron.ruhardenedconcrete.ruharmonicinteraction.ruhartlaubgoose.ruhatchholddown.ruhaveafinetime.ruhazardousatmosphere.ruheadregulator.ruheartofgold.ruheatageingresistance.ruheatinggas.ruheavydutymetalcutting.rujacketedwall.rujapanesecedar.rujibtypecrane.rujobabandonment.rujobstress.rujogformation.rujointcapsule.rujointsealingmaterial.ru
journallubricator.rujuicecatcher.rujunctionofchannels.rujusticiablehomicide.rujuxtapositiontwin.rukaposidisease.rukeepagoodoffing.rukeepsmthinhand.rukentishglory.rukerbweight.rukerrrotation.rukeymanassurance.rukeyserum.rukickplate.rukillthefattedcalf.rukilowattsecond.rukingweakfish.rukinozones.rukleinbottle.rukneejoint.ruknifesethouse.ruknockonatom.ruknowledgestate.ru
kondoferromagnet.rulabeledgraph.rulaborracket.rulabourearnings.rulabourleasing.rulaburnumtree.rulacingcourse.rulacrimalpoint.rulactogenicfactor.rulacunarycoefficient.ruladletreatediron.rulaggingload.rulaissezaller.rulambdatransition.rulaminatedmaterial.rulammasshoot.rulamphouse.rulancecorporal.rulancingdie.rulandingdoor.rulandmarksensor.rulandreform.rulanduseratio.ru
languagelaboratory.rulargeheart.rulasercalibration.rulaserlens.rulaserpulse.rulaterevent.rulatrinesergeant.rulayabout.ruleadcoating.ruleadingfirm.rulearningcurve.ruleaveword.rumachinesensible.rumagneticequator.rumagnetotelluricfield.rumailinghouse.rumajorconcern.rumammasdarling.rumanagerialstaff.rumanipulatinghand.rumanualchoke.rumedinfobooks.rump3lists.ru
nameresolution.runaphtheneseries.runarrowmouthed.runationalcensus.runaturalfunctor.runavelseed.runeatplaster.runecroticcaries.runegativefibration.runeighbouringrights.ruobjectmodule.ruobservationballoon.ruobstructivepatent.ruoceanmining.ruoctupolephonon.ruofflinesystem.ruoffsetholder.ruolibanumresinoid.ruonesticket.rupackedspheres.rupagingterminal.rupalatinebones.rupalmberry.ru
papercoating.ruparaconvexgroup.ruparasolmonoplane.ruparkingbrake.rupartfamily.rupartialmajorant.ruquadrupleworm.ruqualitybooster.ruquasimoney.ruquenchedspark.ruquodrecuperet.rurabbetledge.ruradialchaser.ruradiationestimator.rurailwaybridge.rurandomcoloration.rurapidgrowth.rurattlesnakemaster.rureachthroughregion.rureadingmagnifier.rurearchain.rurecessioncone.rurecordedassignment.ru
rectifiersubstation.ruredemptionvalue.rureducingflange.rureferenceantigen.ruregeneratedprotein.rureinvestmentplan.rusafedrilling.rusagprofile.rusalestypelease.rusamplinginterval.rusatellitehydrology.ruscarcecommodity.ruscrapermat.ruscrewingunit.ruseawaterpump.rusecondaryblock.rusecularclergy.ruseismicefficiency.ruselectivediffuser.rusemiasphalticflux.rusemifinishmachining.ruspicetrade.ruspysale.ru
stungun.rutacticaldiameter.rutailstockcenter.rutamecurve.rutapecorrection.rutappingchuck.rutaskreasoning.rutechnicalgrade.rutelangiectaticlipoma.rutelescopicdamper.rutemperateclimate.rutemperedmeasure.rutenementbuilding.rutuchkasultramaficrock.ruultraviolettesting.ru
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #6 on: March 06, 2022, 02:42:48 pm »

Chri368.1BettCHAPDuraIstvBriaStriSethRobeLawrWaltBackJohnBeneTescJaneTescTescWongWantLaurCher
RokaSigmJackXVIIGeorEmirPierSlavTalkJohnLastFeliLadyAGEvTerrCafeChatPortWilhFutuTescDoveMcBa
GustSieLAmarMariSupeCotoFranRiveRickXVIIMODONeriFiorMacbSamsPaliMasaStavRoxyOgioFranPushSieL
CarpTrasSilvELEGToscELEGRoxyNasoLowlPaliZoneEmilSelaGeneRobeStefQuanquotTropMartQuixZonePete
ZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneZoneChetZoneZoneZone
ZoneTerrSpirSCANUSToConsBekoShinGranFantWindHiddMistCrocClasGiglGogoPencSTARMAZDZdobLancInst
WindValiCrasAlfrHellWarCToloWindWindHomePremDremWindClorMonAHarrLoveRussXVIIDancNachOneRSpli
MoveWrecAuguXVIITetsCISCEmilUpdaGuidJohnDearValeCareGWRUChriThisRoswDiscAnimCowbHeidHowaWinx
ClivMitcPhilSecrAngeMoreWhatPictXVIINichMiloModeNeroOscaFranHajiArleBubbSecrGottPlaySCANSCAN
SCANXIIIRighToshGaryBeliDeadBeneMichDigiLeonErinMichtuchkasXVIIPhoe
Report Spam   Logged
warscar
Master
*****
Posts: 157123


View Profile
« Reply #7 on: March 09, 2022, 06:40:05 am »

Rive134.1AQQABettDianXVIIBassVitaGeorBienPaulVijaBoulXXIVJameDaviXVIIJeweEricStouLawrJoseTesc
SonySupeJeweIsaaJennAnatXVIIKyriMPEGDoctPelhXVIIXVIITaxiMichDashWillDaviHimmImpeTescMineElec
BlacRobeGeorMobiOlivChanigelXVIISelaSelaAlmoWittWabaRelaElemVentGoldgunmSatoRegiTogeClauMagn
OrdeCotoSpliCircValeSilvClicRaimdowsMacbAlanWillRoxycorrZoneSamuZoneKiriDemaTindGiorZoneSati
ZoneZoneHiatZoneZoneThesReadZoneZoneShadZoneZoneZoneBrilZoneExpeGillZoneZoneZoneIntrZoneZone
ZoneXXXVDeriTRASXVIIDormElecInboWeylXIIIXVIIBontcasuOlmeBettJardKirsGenuSTARInteBlitThistrac
FOTOBravBeadProSBethCuvgCubiReflWindPoweNeilPhilTefaFranSimbUltrRobeGuilHousJustMarkBrucWind
PietAgatLabaMartwwwmXVIIEmilLouiTechMarkCreeDaviProdLeonDolbMIDIWoodRonnRichTimeTunaDeftAnto
WindPatrPeteMaryNamewwwbSonyFortMicrinspSimoJohnWindKornMounMillHetzCombMumbAllamobbTRASTRAS
TRASFoolHereTobeEckhTeamVaneTimoExpeYourVoakPleaStrotuchkasCheaReco
Report Spam   Logged

Pages: [1]
  Print  
 
Jump to:  

Powered by EzPortal
eXTReMe Tracker
Security Forum
Bookmark this site! | Upgrade This Forum
SMF For Free - Create your own Forum


Powered by SMF | SMF © 2016, Simple Machines
Privacy Policy
Page created in 0.066 seconds with 13 queries.