Hacking Windows Account Passwords with Cain and Abel

[wex313]

only 300000 years, i better get started

[crazypcdude]

@wex313 With the new processors out since I made this, it will probably only take you 200000 years now. :-)

[xArmedxRiflex]

fedwqc

[crazypcdude]

@xArmedxRiflex 6 characters, all lowercase = not secure :-)

[jakstrance]

Great video, have you guys used any bootable tools to reset passwords or to escalate accounts?

pogostickDOTnet~pnh/ntpasswd/

[crazypcdude]

@jakstrance Yes, I have used this tool as well as several GUI programs that are basically shells for it. It is great to clean off old forgotten passwords and works very well.

[BadManFifi]

OOOOHHHHHH IT WORKED!!!!!!

[trelovallianos]

How to hack passwords from sites?

[bfjoro]

@trelovallianos You can use your browser but it's hard and you can get cought

[GiFtEdv3]

when i click the "add to list" on cracker it says "VirtualAllocex failed: Acess Denied" someone please help me.

[chotu221]

What Song it that? its awesome and catchy!

[crazypcdude]

@chotu221 Wierd Al - All about the pentiums

[DarKIOverDose]

Would it work at shcool

[crazypcdude]

@DarKIOverDose Possibly, if you get the SAM file off of the computer at school you could bring it back to your home computer to work on.

[bfjoro]

@crazypcdude When i try to copy it it says Process being used i cannot copy it or do anything how can i copy it ?

[crazypcdude]

@bfjoro You can grab the SAM file by booting into a linux live USB or CD and then copying to your flashdrive. Google the locations, it varies by windows version

[bfjoro]

@crazypcdude Well im not using Linux.Im using windows 7 and XP.The directory of the SAM is the same C:\windows\system32\config.

[crazypcdude]

@bfjoro The SAM file is locked for copying while windows is in use. You can usually use Cain to get it anyway. If it is still not working, you can boot into a linux CD and just copy it because it is no longer protected. Or you can try PWdump or FGdump which can be downloaded and run from command prompt if you have access. Also,if you are on a network that uses active directory logins, the SAM file may not contain the data you need.

[WetSocks97]

How can I tell which username is to which computer? when i import all my ip's it says Administrator, Guest, HelpAssistant, and Support_388945a0? I know for a fact that there 2 computers on the network, i just don't know which is which, or if they are even showing up

[AhamedyTaha]

Could you not also use this for finding WiFi passwords?

[xXHeYApPLeXx]

nice background lol :P

[crazypcdude]

@xXHeYApPLeXx Thanks, I drew it myself :-)

[itsLAWW]

1:15

[shanu1608]

Could anyone please please tell me which song was it ..its really cool

[crazypcdude]

@shanu1608 It is "All about the Pentiums" by Weird Al. It is his techy takeoff on Puff Daddy's All about the Benjamins

[shanu1608]

Please tell me the name of the song

[suffergilty]

thanks for posting this

[dakosoft1]

hello man great video but i have a problem in ''wireless'' i have a lots of connection but at ''cracker'' i cant get much why is this happen?plz answer

[ZeroG004]

can anyone tell me if cain and able can obtain the hashes from Windows 7? I tried orphcrack and it did not work

[PCAddictsLive]

Thumbs up for the "Drudge" bookmark in your bar!

[homeygeorge101]

how do i hack a youtube account

[nightmare667711]

how long would it take to hack the pass: XXhiimbobbitchyourmom

[crazypcdude]

@nightmare667711 IF I add it to my dictionary file, 1 second.

[nightmare667711]

@crazypcdude lol xD.... thats not really my password but ok : ) i was just asking how long it would take with bruteforce.

[crazypcdude]

@nightmare667711 LOL, bruteforce would take a very long time because of the length and combination of cases. On my PC it would take 10,000 years. A supercomputer using graphics card cores could do it it a month

[nightmare667711]

@crazypcdude oh well do you happen to know how long it might take on my system: CORE i7 980X(6 core), 12gb DDR3 ram 1600mhz, ATI 5970 oced (850mhz, 1200mhz)??? And do you know any possible way for cain and abel to use my graphics card to bruteforce because i heard that my card is really good for bruteforce cracking : )

[crazypcdude]

@nightmare667711 10,000 years was a understatement. Your password using a mixed cap set of 52 chars, the length is 21 chars long. Even if we knew the length and charset, we still have one Undecillion possibilities. Even if you calculate a billion words per second (not likely with CPU) it would take 1 Quintillion years to work it out. A single video card could divide that by as much as 300 - 1000%. Still going to take a long time. The length is the issue. GPU can break 10 chars in a few days.

[nightmare667711]

@crazypcdude do you know how to set up cain and abel to utilize my graphics card in bruteforce??? and thanks again for the replys : )

[crazypcdude]

@nightmare667711 Cain wasn't programmed for GPU, so it can't do it unless their is a hack or addon that I am unaware of. The best gpu tool is command line tool by Ivan Golubev called ighashgpu. Supports NTLM, LM, MD5, SHA1, all kinds of stuff and works on Nvidia or ATI cards. Haven't used it in a long time, so can't give instructions, but your fast card should do really well with it.

[nightmare667711]

@crazypcdude THANKS MAN!!! : )

[crazypcdude]

@nightmare667711 No Prob, Now you get to have some real fun crunching numbers and testing your cards speed. Good Luck!

[ZeroG004]

@crazypcdude are you talking about with rainbow tables?

[crazypcdude]

@ZeroG004 No this is with brute forcing, Rainbow tables should decrease the time. Of course, no rainbow table includes all valid chars for very long passwords, so brute forcing has its uses.

[FireVortex720]

Respond to this video...  how do i do it for windows 7? what hash does it win 7 store?

[crazypcdude]

@FireVortex720 Windows 7 store NTLM

[Cheezit177]

ok mine says it will take 10 years, what would be the actual time?

[crazypcdude]

@Cheezit177

If you have a secure password, it really could take 10 years. If you have a lowercase only short password, Cain might still get it pretty fast. People are now linking multiple pc's and using powerful graphics cards to process the hashes faster. A hacker with a pc lab at his disposal could crack the password in a fraction of that time. Or if you are running XP, he could use ophcrack and have it in seconds.

[elgeo12345]

Epic Vide man this help so much your amazing!!!

[DjblMan13]

THIS IS WHY YOU MAKE A SECURE PASSWORD!

[TheNickspower]

Song name please!!?!?!?!

[sibhmoss]

please tell me how u got sally there all i have is a bunch of administrators and stuff with no passwords do u have to have their email adress r sumtin or can you just hack the stuff on ur comp. whichis poitnless HELP!!!

[crazypcdude]

@sibhmoss While this demo is done on my own computer you can use it on any computer that you can install it on. Or you can get the SAM file from the target computer (lots of ways, google it if you need to) and then take that file to decode at your leisure at home.

[crazypcdude]

@sibhmoss I should also mention that you can use the apr feature to capture user account names and password hashes over the network. The network has to be domain based. This is the standard for server controlled networks. Most home networks are peer to peer, with each computer controlling its own login credentials. So for those, you will need to have physical access to each computer you want to hack with Cain.

[xGODLYxSKiLLeDx666x]

@crazypcdude can i hack in to my moms computer its on the same net work lol>???? i want to see my moms face when i hack in to it.

[Khorask]

and.. this ones only gonna take three hundred thousand years to crack.. *sniff* love it :)

[thewowhelper]

Whats the song name

[crazypcdude]

@thewowhelper "All about the Pentiums" by Weird Al. It's his rather genius take on all about the Benjamins by P. Diddy

[blackboy514]

wonderful dude !!!

[LostTheGameXD]

so glad I found this thing

cheers for the tuturial

[aradioactivedonut]

use rainbowtables, works way better than bruteforce.

[crazypcdude]

@aradioactivedonut True, Only use bruteforce when dictionary and rainbow methods fail.

[GettyVids]

This is what mine says Attack stopped!

0 of 0 hashes cracked

[crazypcdude]

@GettyVids You need a wordlist!

[MegaMenja]

@crazypcdude but i'm doing bruite force

[AguirreFoo1992]

what if you already have somones ip adress and want to attack that?



[Cyph3r0xid3]

@AguirreFoo1992 You would normally use the sniffer and poison the arp. Once you have captured enough packets, you can look up their usernames, passwords and if I am correct, you also can save the hashes that their gateway uses. Also, when you are in the sniffer tab, you use the blue cross to add a host or scan all that are in range if I remember correctly.

[Iph0neAppReviews]

JUST LETTING YOU GUYS KNOW IT IS NOW AVAILABLE FOR ALL WINDOWS OS

[donofthekuwait]

your voice is like Jhon Cena lol

[xxXViiRUSXxx1]

@crazypcdude a rainnbow table also how do i get a hash string 2 a email account for there password??/ my xbox account got currupted when i was "modding it" n i 4got the password

[HaxorsRus]

rofl 3000 years :) 

[xXlolxtechXx]

i noticed you had "GOP" bookmarked.... REPUBLICANS FTW!!!!

[crazypcdude]

@xXlolxtechXx Yep, it's true. If I had Dems bookmarked, I would be using an iMac and eating free range tofu.

[chopstix94]

@crazypcdude im a democrat and i hate those things! good video though... other people didnt even mention the wordlist and i kept wondering why it wouldnt work. thanks steriotypical fiend.

[crazypcdude]

@chopstix94 Just a little good natured fun.  I have friends of all political persuasions.

[00MondoMedia]

soo i tried to hack the admin password and it doesn't work even with the normal account passwords nothing works, help me

[Sc0ttTay]

ok so i want to get a password to a remote computer. how would I add NT hashes from that computer. Like where you added hashes from local system, how would i get them from a remote computer?

[wishihadfullrune]

thanks man gave me a better understanding of cracking passwords

[tutomax22]

no me carga la barrita

[mrRandomlolify]

rainbow tables would've cracked that last password in probably 160 seconds ; )

[gspotr69]

@mrRandomlolify How do you use rainbow tables? I've searched and can't find any help... I have downloaded them already.. any help would be appreciated.. TIA!

[crazypcdude]

@mrRandomlolify Ophcrack's Rainbow Tables can do it faster than that. Xp is pretty much broken when it comes to passwords. I still advocate strong PWs though. At least it keeps out the amateurs.

[TehNigo]

does the v2 one work? (the top one)

because it says it is discontinued...

[UnkutINC]

how does this hack someones email like hotmail?

[BadBoyProds]

Can this be used on xbox live?

[cricket981]

@BadBoyProds yes it can

[Misch0ko]

thx for a nice vid (:

[greenbootlace]

vista?

[crazypcdude]

@greenbootlace The latest version supports Vista and 7.

[kkumarbaba]

thanks.......

[spartanwarrior217]

can you please tell me why its telling me the wrong password for vista? like its giving me a password but its not the wright one...

[iraqiboy90]

I got a 20 char long password with uppercase, lowcase, numbers and special char.

how long will it take to crack?

and does the cain & abel automaticly have the tables inside it?

and does it have the german char also?(ö,ä,ë,ü,ï,é´, and ect...)

[xxXViiRUSXxx1]

@iraqiboy90 depends on the attack

[slazenger97]

nice vid! 5/5

where did u get dat hacking song?

[crazypcdude]

It is Weird Al's "All about the Pentiums", from his Running with Scissors album.

[SasukeU854]

lime wire duu

[codmodds]

Can u use vista or no plzz message me

[crazypcdude]

Works on Vista before SP1

[AwesomeHackTutorials]

dude i have windows 7 and this works just fine for me

[mastercambo123]

yo wassup dude i need help pm me plzzz