Wednesday, October 17, 2007

Cracking Windows Logon Password.(Hacking SAM file)

Cracking Windows Logon Password.(Hacking SAM file)
SAM File - Holds the user names and password hashes for every account on the local machine, or domain if it is a domain controller.

-What are password Hashes?

Actually when we enter password in Windows Logon Tab, Windows encrypts our password using an encryption scheme that turns our password into something that looks like this:


SAM file can be found under C:(default OS drive) -> WINNT -> System32 -> Config -> SAM.

SAM file can be cracked by sing a simple freeware software "SAMInside".

Troubleshooting : While copying SAM file it shows an error of "Access Denied" or "File in Use". Actually copying of SAM file is restricted by Windows.

There are many alternatives to copy SAM file.

[1] You can boot your system by a Live Linux CD such as Knnopix or Fedora. Linux has access to all Windows Files. This way SAM file can be easily copied.