Security Basics mailing list archives

Re: restore Administrator password


From: "ZEN" <KIRPAGULATI () HOTMAIL COM>
Date: Sun, 18 Apr 2004 15:17:25 +0530

umm.....if u use something of a pasword cracker...and the admin guy used a
decent password of about 8 characters or so that are not directly out of a
dictionary....u could get stuck for along long time cracking the password.
Go along with the bd040116/cd040116 file i mentioned in an earlier mail to
do it for you.
    Heres another way i found you could do it(i fiddle a lot with system
files). Goto your system32 directory and create a backup of logon.scr and
then delete it!!!
    now rename cmd.exe(make a backup of this also) as logon.scr.
    Now logoff your computer and leave it on for abt 20 mins(patience it'll
happen).Now instead of running the screensaver your OS will run an
unprtected command prompt where you can use the command : "net user <name of
admin a/c> <new password>" (Note you do not need the old password to change
it!!!!)
    This will not work while your logged on as another user as it will
return an error saying that you do not have sufficient right. But before
logging in there are no restrictions created ;-)
    It works in XP which is just a build up on Win2000/NT so it should work
in your system.
Best of luck cracking the password.

-ZEN
----- Original Message ----- 
From: "sec" <sec () moomia com>
To: <security-basics () securityfocus com>
Sent: Saturday, April 17, 2004 2:35 AM
Subject: Re: restore Administrator password


What you need is a knopix CD from knoppix.org and get something like
lophtcack or caine
and able and you will be able to crack the password.
Depending on the password strength this could be done in a couple of
seconds or some minutes.
good luck


---------- Original Message -----------
From:
To:
Sent:
Subject:


------- End of Original Message -------


SPAM-PROTECTION KEY: kp1e9z8vqqcdmp624tflf5n5
See http://www.moomia.com/spamcheck.htm


--------------------------------------------------------------------------
-
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or
less
to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the
skills
of an Ethical Hacker to better assess the security of your organization.
Visit us at:
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
--------------------------------------------------------------------------
--



---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------


Current thread: