Please Reply

M-NOOR's Avatar, Join Date: Jun 2008
Newbie Member
IN WHICH FILE WINDOWS CONTAIN SECRETS .
e.g user account names, password etc
AND HOW IT BE OPEN

THANKS FOR REPLY
shabbir's Avatar, Join Date: Jul 2004
Go4Expert Founder
Replied. Try giving better titles.
XXxxImmortalxxXX's Avatar
Invasive contributor
First of all not trying to be rude learn how to speak english

Quote "And how it be open" Quote

yea plz learn to type better second of all have u tryed googling it?

Last edited by XXxxImmortalxxXX; 3Jul2008 at 22:52..
M-NOOR's Avatar, Join Date: Jun 2008
Newbie Member
Hello Imortal. I Am Sorry For Wrong Wording.
Yes I Tried Google. But I Found Nothing Except A File That Is Sam File.
The Google Says That This The Main File In Which User Name And Passwords Are Kept.
But The Problem Is That I Never Open , Nor Copy It.
So Tell Me What Should I Do To Open It.

Thanks
XXxxImmortalxxXX's Avatar
Invasive contributor
k well There is no "password file" under Microsoft Windows NT/2000/XP. Microsoft Windows NT/2000/XP stores encrypted password hashes in the Windows Registry

If you can access the Registry you can use PWDump by Jeremy Allison to view the password data.

PWDump output consists of seven colon delimited fields


Username
User number
Encrypted password
LAN Man Password Hash
Windows NT Password Hash
Full Name and Description
Home directory



sample passwd entry: will:1000:30FA7B24C6108C5A8B4BCCA42D5816FF: B3823C82B43238D31BAF98FA4035255FWill Spencer, FAQ Author::

Broken down, this password entry shows:
Username will
User number 1000
Encrypted password 5fg63fhD3d5gh
LAN Man Password Hash 30FA7B24C6108C5A8B4BCCA42D5816FF
Windows NT Password Hash B3823C82B43238D31BAF98FA4035255F
Full Name and Description Will Spencer, FAQ Author
Home directory



RDISK stores a compressed backup copy of the password hashes in %SystemRoot%\repair\sam._. If you can access this file, you may be able to restore it to another system and access the password information contained within it