![]() |
|
How to hack/recover a windows password in <20 minutes [TUT] - Printable Version +- Hack Forums (https://hackforums.net) +-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45) +--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447) +---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10) +---- Thread: How to hack/recover a windows password in <20 minutes [TUT] (/showthread.php?tid=3355801) |
How to hack/recover a windows password in <20 minutes [TUT] - ♠ɪᴄᴇ♠ - Mar 25, 2013 Hi everyone, wanted to create an easy tutorial on how to hack a Windows XP/Vista/7/[Not sure about 8] password in about 20 minutes or less. Anyways, lets get started. WHAT YOU WILL NEED: ---USB 4 GB or more ---Backtrack 5 R3 [FREE] http://www.backtrack-linux.org/downloads/ ---Unetbootin: http://goo.gl/N0syu __ ---STEP 1: Ok, now that we have all that, take your usb, and plug it into your own computer. --STEP 2: Open up Unetbootin (will require admin privileges) and select Disk image, ISO, and then browse to the ISO you downloaded from one of the above links. Select USB drive, or hard disk if you are using one, and select the proper drive. Then click OK. --STEP 3: When Unetbootin finishes, it will ask you to reboot. Just close out of that, and then eject the usb. --STEP 4: Plug the USB into the computer you are hacking(doesn't matter if the system is on or off) and then restart your computer, or boot it up if already off. Depending what model you have, when booting there should be an option such as (for hp) "Press ESC for more options". Depending on what to press, do this, and then do the following: If there is a label "boot options", press the desired key to get there, and chose your usb. If there is not a label "boot options", and just a bluish old fashioned screen, navigate to boot options (sorry, don;t remember the exact path) and move your usb to the first boot option. --STEP 5: If you have successfully booted, then you should be presented by a screen with options such as "Default" "Default Text Mode" etc. Ok, just press enter, and you should see a lot of code flying down the screen. When the code stops, and there is a red text containing Code root@btCode mkdir /mnt/win Code startx(you should be presented by a screen with a dragon and "backtrack 5" background) ---STEP 6: In the top right click on system, then home folder. Almost like in windows explorer, how in the left there is documents, music, pictures....just click on 'File system', and you should be presented with different folders. Go into mnt-->win (if you had an error before in step 5, go to win7)-->Windows-->System32 ---STEP 7: After the System32 folder loads up *might take from 10 seconds to a minute navigate to a file with the name of 'sethc.exe'. This is the sticky keys file. If you use sticky keys, or don't want to get rid of them, put this file on a usb to restore to your computer later, but either way, delete the file from the folder. ---STEP 8: Find the file named 'cmd.exe' and rename it to 'sethc.exe'. ---STEP 9: Take out your usb and then reboot your computer, windows should load up if you took out the usb with backtrack on it. ---STEP 10: when you are at the windows login screen, hit the shift key 5 times in a row until a command dialouge pops up. You now have administrator rights in command prompt ---STEP 11: Enter this code in the command promp- Code net userThis should display the current users on the computer. ---STEP 12: Then enter this code with Username being replaced by the username (ex: John) you must recover the password from- Code net user Username *---STEP 13: You should be presented by "type a new password for the user:" ---STEP 14: Enter the password you want, and you have hacked the account ! After gaining access to the computer, be sure to go to 'Windows-->System32' and rename 'sethc.exe' to 'cmd.exe'. If you saved the original sethc.exe file, drag it into the folder, and your good to go. Otherwise the person's computer's command promp will be sethc.exe instead of cmd.exe OTHER COMMANDS: Give admin acces to user: Code net localgroup administrators USERNAME /addTake admin rights away from user: Code net localgroup administrators USERNAME /delete* - PedroDJ - Mar 27, 2013 (Mar 27, 2013 04:50 AM)parisIvra Wrote: Penetrate Computer Via Facebook Only Infected link: post reported. This is the same stupid user of yesterday, that's spreading virus on HF. Please ban. (Mar 27, 2013 04:50 AM)parisIvra Wrote: Penetrate Computer Via Facebook Only Infected link: post reported. This is the same stupid user of yesterday, that's spreading virus on HF. Please ban. * - ♠ɪᴄᴇ♠ - Mar 27, 2013 PedroDJ, what does that user have to do with this thread? * - f00bar - Mar 27, 2013 you do know there is a simple program to put on a usb boot it up and it will bypass the password lmao * - ♠ɪᴄᴇ♠ - Mar 27, 2013 Really, lol? What's it called? Would really like to check it out. * - LittleBobbyTables - Mar 27, 2013 Konboot, the official link is http://www.piotrbania.com/all/kon-boot/ |