how to get a windows password with ophcrack

This is an instructable to teach you how to use the program Ophcrack  to get windows passwords. I am sharing this to give people the knowledge how to do this. I do not take any responsibility for what you do with this information.  I strongly advise you to not use this except on your own computer or to get permission prior to doing this.

Step 1: Getting the SAM file

In windows XP (which I will be using this whole instructable) the Sam files that we need are located in C: (if thats the hard drive with the OS on it) in C/windows/system32/config. If you cant find the sam files just hit ctrl+F and search for *.SAM and you will hopefully get the location. Now that you know where it is you need to get on a live CD of some sort. Because you cant copy the SAM file when Windows is active. I advise the Ophcrack Live CD because it has the ophcrack program on it already. A live flash drive could also be used. Save the whole Config file. I recommend saving it on a flash drive.

Comments

[Cliy]

Except ophcrack, there are still many excellent windows password reset tool for us to break windows password, such as Windows Password Reset it is easy and safe.Everyone who lost windows password can have a try.

[yzi]

In fact, U can try more than a few times to enter a password. Of course, U can use one way to search password recovery tools in website.

You will found much of recovery tools, but I think Windows Password Recovery Tool 3.0 is a good choice, I know that is CHEAPEST and easy to use.

Anyway, you will login to my computer immediately.

[octavian234]

I would imagine this would work with network users as well?

[syons]

If you have a bootable USB drive,some password tools can be burn to it and you can boot your computer from USB to run the software,so that you can recover/remove WIndows system password from USB.
Such as Windows Password Rescuer,can launch from CD/USB.

[thekid]

The way you could do that is find the Sams on the network mainframe that all the accounts are stored on. I haven't ever done this ( I don't have a server) but if you succeed you should write out the details :-)

[octavian234]

A foreseeable problem may be not having access to the mainframe. Well maybe not. I do not know how the network is set up but it would make sense that you could access the mainframe without booting windows right?

[thekid]

it would depend on how it was set up. if it needs authentication you could still see it but not access it without the password

[BinaryMage]

For an easier way, go here.

[thekid]

but that only works resetting not getting the pass.

[BinaryMage]

Yes, I know, but if you want to get on to a computer fast, that is faster and easier. :)