RE: restore Administrator password

["JTH" <jth () visi com>]

> -----Original Message-----
> From: sec [mailto:sec () moomia com] 
> Sent: Friday, April 16, 2004 4:06 PM
> To: security-basics () securityfocus com
> Subject: Re: restore Administrator password
>
> What you need is a knopix CD from knoppix.org and get 
> something like lophtcack or caine and able and you will be 
> able to crack the password. 
> Depending on the password strength this could be done in a 
> couple of seconds or some minutes.

Chntpw is much easier (this it the aformentioned utility from Peter
Nordahl) and it is often included on knoppix distros (or at least on
knoppix-std and L.A.S.) 

Even though this person did not need instructions for a domain controller,
it is possible to do this on a domain controller. See
http://www.jms1.net/nt-unlock.html for details. (Interesting idea, and
this page is linked to from Nordahl's FAQ page.) 


---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------