Saturday 30 August 2014

Hack Windows password using backtrack

NOTE : Backup all your data first

Watch Video : http://youtu.be/BlOtqwbZagE

All windows-os encrypted password is stored in SAM(Security Accounts Manager) file . Which is present in "C:\Windows\System32\config" folder.

What we have to do to hack password is copy the all "config" folder of computer which don't have any password to the other computer have the password.
(I have tried on windows7 ultimate,windows-xp works 100%)

The question is how to paste the "config"  folder into computer which have the password ?
(we can do this thing by using Backtrack live cd or other live cd like fedora,etc)

Step 1:
Insert the backtrack live cd into computer which don't have the password and restart the computer.choose "Text mode". It will about 2 min to start backtrack-os from CD,[Default backtrack password is "toor"].
when the text mode is started type "Startx" command to run graphical view of backtrack.

Step 2:
Now you will see your "C: drive"(actually not c: drive you have to search which drive have the windows folder) in Backtrack "computer" . copy the "config" folder from "Windows\System32\" to any pendrive .
Now you have the "config" folder of computer which don't have any password into your pendrive.

Step 3:
Follow the "Step 1" on other computer who have the password. Now copy the "config" folder which you have in the pendrive to "Windows\System32\".

Step 4:
Done. Restart the other computer which have the password. you will see no password is asked.
(if linux live run doesnot start,then goto bios setting and change the sata mode=AHCI)

Watch Video : http://youtu.be/BlOtqwbZagE