New Idea To Get Admins Passwords.

11-16-2011, 03:22 AM #1

Jakes625

Guest

n/a

Posts

n/a

Reputation

n/a

Credits

Member

Once upon a time...

NextGenUpdate

(adsbygoogle = window.adsbygoogle || []).push({}); Well I created a script that could obtain access to C: drive, (on our domain at school)

Now, where are the users passwords stored?

Because in C:\Users\ it shows all the logged on user's, which at my school are all 3 of the adminz
:lol:

we'll have to do some looking :p

(adsbygoogle = window.adsbygoogle || []).push({});

11-17-2011, 03:29 PM #2

joyee

Gobble

4

Posts

20

Reputation

0

Credits

Member

Nov 2011

NextGenUpdate

Yes this is the way to expose your ideas. but i could not get you exactly. can you please repeat it again for me. how i can get the password of admin. thanks man

11-17-2011, 06:33 PM #3

Epic?

Awe-Inspiring

1,052

Posts

2,851

Reputation

0

Credits

Premium

Oct 2010

NextGenUpdate

Originally posted by Team

Well I created a script that could obtain access to C: drive, (on our domain at school)

Now, where are the users passwords stored?

Because in C:\Users\ it shows all the logged on user's, which at my school are all 3 of the adminz
:lol:

we'll have to do some looking :p

I can't guarantee it, but I'd imagine passwords are stored in C: \Windows... I'd check in C: \Windows\system - allegedly, they're stored in sam files, which you won't be able to access unless you're going through something like Linux (which is what I'd do anyways if I wanted root access to a machine, just install it to a live USB/CD). Remember, they're probably going to be salted and hashed (possibly more than once), for all we say about Windows, they still know quite a few things about security.

EDIT: I put spaces between the C: and the \ so that those stupid smileys wouldn't appear. You'll have to remove those spaces on your end.

11-17-2011, 06:45 PM #4

doxis

< ^ > < ^ >

1,304

Posts

1,187

Reputation

0

Credits

Member

Aug 2010

NextGenUpdate

need to know what system?
win xp,vista/ 7 ?

11-18-2011, 08:38 AM #5

Docko412

Banned

456

Posts

474

Reputation

0

Credits

Banned

Dec 2010

NextGenUpdate

it doesn't matter really what you use the passwords are stored in

    

C:\WINDOWS\system32\config\SAM

or

    

C:\WINDOWS\system32\config\SYSTEM

either way they are md4 hashed to prevent any data tampering. u can however brute force them.
windows converts them to all uppercase before hashing.

11-19-2011, 03:14 AM #6

Pichu

PICHU.

6,550

Posts

34,645

Reputation

8

Credits

Former Staff

Jan 2011

NextGenUpdate

Originally posted by Epic

I can't guarantee it, but I'd imagine passwords are stored in C: \Windows... I'd check in C: \Windows\system - allegedly, they're stored in sam files, which you won't be able to access unless you're going through something like Linux (which is what I'd do anyways if I wanted root access to a machine, just install it to a live USB/CD). Remember, they're probably going to be salted and hashed (possibly more than once), for all we say about Windows, they still know quite a few things about security.

EDIT: I put spaces between the C: and the \ so that those stupid smileys wouldn't appear. You'll have to remove those spaces on your end.

Don't forget to tell him that they may have them set to hidden so normal browsing won't show these files.

---My school doesn't do the password save anymore, they have their computer wipe everything after each shutdown and go back to default. Nothing to steal :/---