Windows NT 4.0 password cracker

[darkamulets]

i recently got a job, they run a older NT 4.0 server but the original tech moved out with all the paperwork so no one knows the administrator password, any password crackers that anyone can suggest? or tricks to extracting the password from the system, i have physical access to the system, but i cant login as a administrator most i can do is login as a normal user. plz help ASAP

 

[gaidin123]

I believe l0pht has an old NT password cracker..Look up info on:
Lophtcrack, ntcrack, and pwdump

Gaidin

 

[n0cmonkey]

There is also a linux bootfloppy that will allow you to change the password on NT 4 systems. Do a search on NT 4 in OS forum and a link to it should be there.

 

[Goosemaster]

Then, according to that, it must be harder than making K. Ley tell the truth to secure an NT 4 box:Q

 

[SaigonK]

If you have access to NTFSDOS Pro you can load it up from a floppy then go find the SAM file ..(.look under c:\winnt\system32\drivers\etc...) think thats it....
Delete the SAM file and all will go back to normal..be wary though..it resets EVERYTING...so all other user profiles on the box will go bye bye

 

[Daniel]

If you are gonna bother getting the sam file why not just copy it and run Lophtcrack so you don't ruin everything? That or as was suggested use that linux boot disk I hear it works well.

 

[Tallgeese]

Check out the fabulous world of The Nomad Mobile Research Centre.

P.S. Be sure to check both the "Black Hat" and the "White Hat" pages for each respective OS.
P.P.S. If you want a suggested procedure, PM me.

 

[Zim Hosein]

darkamulets, this is what I believe n0cmonkey is referring to: http://home.eunet.no/~pnordahl/ntpasswd/ . Hope this helps.

 

[darkamulets]

hope this works, if it does i make money if it don't ugh, well thx anyhow people

 

[BooneRebel]

<< hope this works, if it does i make money if it don't ugh, well thx anyhow people >>



Are you going to share?

 

[n0cmonkey]

<< darkamulets, this is what I believe n0cmonkey is referring to: http://home.eunet.no/~pnordahl/ntpasswd/ . Hope this helps. >>



Thats not where I got the floppy I mentioned, but its probably the same thing. It would be a pain for me to look for the floppy I got way back when

 

[Abzstrak]

theres an easier way on NT4, just make an ERD off an NT box that U know the passwords too, then boot off the nt cd on the box with unknown passwords and do a repair but only replace security information, when prompted for an ERD use the one from the other machine. Then boot into windows, it'll have the passwords of the box you made the erd from.

When U do this the boxes should have the same service pack level.... all in all it takes about 5 - 10 minutes and is REALLY easy