Go4Expert

Go4Expert (http://www.go4expert.com/)
-   Ethical hacking (http://www.go4expert.com/forums/ethical-hacking-forum/)
-   -   Please Reply (http://www.go4expert.com/forums/please-reply-t11334/)

M-NOOR 14Jun2008 14:08

Please Reply
 
IN WHICH FILE WINDOWS CONTAIN SECRETS .
e.g user account names, password etc
AND HOW IT BE OPEN

THANKS FOR REPLY

shabbir 14Jun2008 15:51

Re: Please Reply
 
Replied. Try giving better titles.

XXxxImmortalxxXX 14Jun2008 21:25

Re: Please Reply
 
First of all not trying to be rude learn how to speak english

Quote "And how it be open" Quote

yea plz learn to type better second of all have u tryed googling it?

M-NOOR 14Jun2008 22:53

Re: Please Reply
 
Hello Imortal. I Am Sorry For Wrong Wording.
Yes I Tried Google. But I Found Nothing Except A File That Is Sam File.
The Google Says That This The Main File In Which User Name And Passwords Are Kept.
But The Problem Is That I Never Open , Nor Copy It.
So Tell Me What Should I Do To Open It.

Thanks

XXxxImmortalxxXX 15Jun2008 19:04

Re: Please Reply
 
k well There is no "password file" under Microsoft Windows NT/2000/XP. Microsoft Windows NT/2000/XP stores encrypted password hashes in the Windows Registry

If you can access the Registry you can use PWDump by Jeremy Allison to view the password data.

PWDump output consists of seven colon delimited fields


Username
User number
Encrypted password
LAN Man Password Hash
Windows NT Password Hash
Full Name and Description
Home directory



sample passwd entry: will:1000:30FA7B24C6108C5A8B4BCCA42D5816FF: B3823C82B43238D31BAF98FA4035255FWill Spencer, FAQ Author::

Broken down, this password entry shows:
Username will
User number 1000
Encrypted password 5fg63fhD3d5gh
LAN Man Password Hash 30FA7B24C6108C5A8B4BCCA42D5816FF
Windows NT Password Hash B3823C82B43238D31BAF98FA4035255F
Full Name and Description Will Spencer, FAQ Author
Home directory



RDISK stores a compressed backup copy of the password hashes in %SystemRoot%\repair\sam._. If you can access this file, you may be able to restore it to another system and access the password information contained within it


All times are GMT +5.5. The time now is 21:40.