Testing Your Windows XP Password

In this tutorial, I teach the viewer how to test their Windows XP passwords by gaining access to their account passwords using FGDump and cracking the pwdump file with John the Ripper. This video is intended for security purposes only.

Category:

Education

Tags:

• Thomas
• Pepe
• John
• the
• Ripper
• tools
• FGDump
• Florida
• State
• University
• XP
• Windows
• Password
• Cracking
• pwdump
• Security
• Computers
• Tutorial
• computing
• testing
• strength

[tpfsu]

An imortant note I should have added: You must have administrator access in order to run this tool. You will get access denied if you try running under a non admin account.

[Timilias]

hi nice vid, I was able to follow all the steps but when I try to get those hash files (or whatever they're called) I can't, I mean I can, everything runs perfectly, but only I get this file (127.0.0.1) empty (size 0kb)...

I was wandering where could the problem be, for example, do I have to turn off my windows firewall or anything like that except of anti-virus ?

or, is there other way to get those hashes ?

thanks

[tpfsu]

Only thing that needs to be turned off is anti-virus. A few things to check. Make sure you copy the 127.0.0.1.pwdump from your fgdump folder and overwrite the file in your john the ripper folder. Make sure you are using windows XP. Also make sure you have your user accounts setup with passwords. That's really all I can think of. You can look at the 127.0.0.1 file by right clicking and opening with notepad. It should have each users name with hash code.

[watupdog99]

Hey nice vid. I dont know if you know this but Foundstone has a gui for john the ripper called fscrack v1.0. It makes it much simpler. And another way to get the password in case an antivirus won't let you is to use a linux live cd and go to system32/config and get the sam and other databases.

[tpfsu]

That's good to know about the GUI tool, thanks....

[CL0udnyn3]

Good video, just wondering, what model mic do you use? Mine sucks and I can't seem to find one good for screen recording.

[tpfsu]

I actually borrowed a friends mic to create this video. His username is MagicalHobo182. Shoot him a message and I'm sure he will be able to give you the info.

[arthusu]

pero tambien se puede con el am o tienes que sacar el hash??

espero una respuesta y te lo agradeceria mucho si me respondieras =)

[eMindFreak]

wow man! like like like like like!!! i love your video!!!! :)

[Arctific]

Definitely interested in an update concerning Cached Passwords. This would need the system to be a member of a AD Domain.

Also, I recommend the use of the following definition for a better than average password.

1) If the password lasts longer than 2 hours against John the Ripper, Using a commercially obtainable computing system costing less than $2000.

Please note: with LM hashing, passwords less than 15 places that meet or exceed the advice given could last less than 2.5 minutes.

[TheLagripedz]

thank you man it's a great video : )

[bcut]

not bad dude...one of the few tutorials on you tube that shows FGdump in action.

From one student to another, thanks! Good luck with school. :)

[0Riddic]

@tpfsu WRONG i did not but I did get the error no password hashes loaded

[MrLeeroy789]

Hi there I am slightly stuck any help would be great I have got the two files on my desktop then I have extracted them, however I am stuck on the whole "Make sure you copy the 127.0.0.1.pwdump from your fgdump folder and overwrite the file in your john the ripper folder2" part when I try using the simple commands like explained on the video I get this "The system cannot find the path specified" can anyone help please.

[aarohp]

hey, i followed your vidieo but when i type fgdump.exe -e it comes acess denied

[Snuckie7]

it says access denied when i try opening fgdump . . .