Skip navigation

JSI Tip 1984. Another Windows NT password hack.

Hack_Password.IMZ is an image file that contains a Linux kernel, and program that you image extract to a floppy (I used WinImage, but you can follow the author's instructions). I quote:

Offline NT Password & Registry Editor


Overview

  • This is a utility to set password, or reset password, of any user that has a valid (local) account on your NT system, by modifying the crypted password in the registrys SAM file.
  • You do not need to know the old password to set a new one.
  • It works offline, that is, you have to shutdown your computer and boot off a floppydisk. The bootdisk includes stuff to access NTFS partitions and scripts to glue the whole thing together.
  • Note: It will now also work with SYSKEY, including the option to turn it off!

Why?

NT stores it's user information including crypted versions of the passwords in a file called 'sam', usually found in \winnt\system32\config. This file is a part of the registry, in a binary format previously undocumented, and not easily accessible. But thanks to a German(?) named B.D, I've now made a program that understands the registry. As far as I know, Microsoft provides no way of changing the password if you cannot log in as someone with appropriate privileges, except restoring the registry files from the rescuefloppy.

  • You don't forget passwords?
  • You never get boxes to admin when someone quits suddenly?
  • Your vendor delivers a preconfigured system to you, but never have "freak" accidents and lose the password they've set on it?
  • If so, what are you doing reading this?? Go read propaganda from your favourite software vendor instead.

NOTE: If you are concerned about the ease with which this hack, and the other two password hacks on this site ( tip 1864 and tip 0554), can gain Administrative access to your computer(s), remember that

There is no security without physical security.

Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish