Hack Windows 7 Admin password with Backtrack 4

[mateusz12322]

Hey, i keep getting this:

root@bt:/mnt/sda2/Windows/Syst­em32/config# samdump2 SYSTEM SAM > /root/pass1

Root Key : CMI-CreateHive{key here}

CMI-CreateHive{cmi-hive no}\SAM\Domains\Account key!

root@bt:/mnt/sda2/Windows/Syst­em32/config# cat /root/pass1 | grep Administrator > /root/pass2

root@bt:/mnt/sda2/Windows/Syst­em32/config# cd /pentest/passwords/jtr/

bash: cd: /pentest/passwords/jtr/: No such file or directory

Using Backtrack 5

[mrsmileycorps]

it gives an errir at samdump2 why?? im using backtrack 5 btw...

[GGsterooz]

I keep getting the error:

Unknown command "-f:NT"

[GGsterooz]

@GGsterooz Why do you think I'm getting the said error? Is it because I never installed any separate tables?

[GGsterooz]

@GGsterooz OK nvm LOL I figured it out. I had to type "--format=NT" instead of "-f:NT"

You should put that in the comments in case some other people have this problem as well

[bangmeister]

which version of backtrack 4 is this? R1 or R2?

[bangmeister]

is the code the same for backtrack 5? I tried the code in bt5 and i couldn't proceed when I typed the samdump system sam etc part.

[imanidot95]

@bangmeister

i had the same issue on BT5

"Error reading from sam"

[bangmeister]

@imanidot95 yea that's exactly what mine said

[JASGames]

@bangmeister Use SYSTEM SAM instead

[robin04smarch26]

If you have the other admin account than you can reset the main administrator password. If you don't have the other admin account than you can use the reset disk.

If you don't have the reset disk than you can use software called Password Resetter. The Main Purpose of this software is to remove windows password. You can get the software from

w w w r e s e t p a s s w o r d w i n d o w s c o m

[JuniperSprouts]

How about a txt file with all of the implemented commands or having it in the comments for keeping on a thumb drive?

[NadiaaibaN]

thx man... you ar the best

[Zukatsr125]

Its not the same if you run Backtrack in virtualbox (partition info/device boot)

,, any tips?

[DeFragGrenade]

"No password hashes loaded" after getting to the -format:NT stage. I'm running Backtrack 4 R2 from a LiveCD.

[gerfmarquez]

I think the password i forgot was too complex for John this time. no luck and I've let it for 30 minutes already!

[iValentine22]

i have a question: when i enter the cat command it says that it is not a command. i have checked a thousand times and it is right. why is it not working?

[rtsJaxo]

@iValentine22 had this problem with some bt4 tools.

try this ./cat (the rest of the command)

[93qp]

what button to get | ?

And when I make the " ./john -f:NT /root/pass2 "

I get Unknown option: "-f:NT" what did I do wrong?

[lfchan93]

@93qp change to "./john -format:NT /root/pass2", that will make it work. However, after that step it said no hashes loaded, can someone help me here?

[elrabinoso]

hey i´ve a question in line:

./john -f:NT /root/pass2, john is the user? and i ve to cange it for the usser i want to know the pass?, and why u puy in one line pas1 and then pass2? what´s the diference?

[pheephiphophum]

@elrabinoso Hey, john is the name of the application you are running, hence "./john" and the pass1 and pass2 are just the names of the files, they have no real meaning, sorry for confusion.

[pheephiphophum]

You can always use CIA Commander for an even faster reset/remove. However, Backtrack 4 is free (same with many other tools) and this video is intended to help get people familiar with the Backtrack 4 tools.

[pheephiphophum]

I have never heard of it. Is it similiar to ophcrack?

[DHFORPM]

what about HyrenBootCD ? i thing HB is faster and etter ( in recovering pwds )

[ClantonNetwork]

@DHFORPM my password remover is way better than recovering a password mine completely resets any password on any account and any windows os

[DHFORPM]

@ClantonNetwork whatever ..... nice video

[ClantonNetwork]

@DHFORPM lol thanks :D

[rtsJaxo]

@ClantonNetwork u can also use chntpw 4 this.

the point of this not to reset it, it is to get it....

use strong passwords people alphanumeric with thing like !§""§$%&$&()= etc.