Hello,
I'm looking for help in order to crack a Windows 10 password. I tried with ophcrack but I didn't success in booting on the LiveUSB. Maybe I should use a SliTaz LiveUSB, but I don't know if ophcrack IS already installed on this distro. Maybe I should use a Kali Linux LiveUSB, but I don't know what to do with it ! (SAM dump ? Crack hash ? Will it work with Windows 10 ?)
I don't want to reset it, I want to recover/crack it !
I hope you can help me, thanks a lot.
If you can get the sam dump and post it here, I'm pretty sure we can use that to get the hash and attack it. I haven't messed with recovering the hashes themselves, but I'm almost certain windows is still using NTLM to store passwords which is insecure
(May 19, 2017 11:11 AM)Sheeple Wrote: If you can get the sam dump and post it here, I'm pretty sure we can use that to get the hash and attack it. I haven't messed with recovering the hashes themselves, but I'm almost certain windows is still using NTLM to store passwords which is insecure
I can't access to the PC right now, but I'll do it when I can. Also, I'm a newbie, but Google will help me, thanks for your (quick) answer !
May 19, 2017 11:34 AM
(This post was last modified: May 19, 2017 11:34 AM by Sheeple.)
(May 19, 2017 11:24 AM)Beerus02 Wrote: I can't access to the PC right now, but I'll do it when I can. Also, I'm a newbie, but Google will help me, thanks for your (quick) answer !
If you manage to get the hash, I'll be more than happy to help with cracking it. Good luck :)
Why honestly waste the time in cracking it??? If you can use konboot and boot straight in without the password. It makes more sense since you have physical access to the machine.
(May 19, 2017 12:14 PM)__Digital__ Wrote: Why honestly waste the time in cracking it??? If you can use konboot and boot straight in without the password. It makes more sense since you have physical access to the machine.
Simply because my my goal is to obtain this password, I don't need to boot on the machine, I just want to crack this password discreetly.
May 19, 2017 06:28 PM
(This post was last modified: May 19, 2017 06:30 PM by Noobface80.)
Back in the day there was a program called passcape that had not only a password clearing capability, but a minor dictionary attk capability (which used a weak dictionary list but it was something. There is a new version which charges you and kinda sucks, but if you just need to crack one password, you can probably find a torrent of the older version. If this will be a reoccuring thing, you may wanna seek tutorials on here...glman
(May 19, 2017 06:28 PM)Noobface80 Wrote: Back in the day there was a program called passcape that had not only a password clearing capability, but a minor dictionary attk capability (which used a weak dictionary list but it was something. There is a new version which charges you and kinda sucks, but if you just need to crack one password, you can probably find a torrent of the older version. If this will be a reoccuring thing, you may wanna seek tutorials on here...glman
or just use hashcat ?? lol
So, I tried to dump SAM on my own PC with Kali (pwdump), and something strange happened : I dumped differents hashes, from differents accounts on my PC (administrator, guest, DefaultAccount, me, HomeGroupUser$, some body else). Or, I have only one account installed on my Windows 10 (my administrator acc, "me" if you prefer). Is it normal to see others acc hashes ? And, I would know, how much time does it take to you to crack hashes ? (for 6 to 8 caracters password). I'll try on the real PC later in the day (I tried in order to see what will happen). Thanks for helping me !
May 20, 2017 07:15 AM
(This post was last modified: May 20, 2017 07:20 AM by Sheeple.)
(May 20, 2017 05:58 AM)Beerus02 Wrote: So, I tried to dump SAM on my own PC with Kali (pwdump), and something strange happened : I dumped differents hashes, from differents accounts on my PC (administrator, guest, DefaultAccount, me, HomeGroupUser$, some body else). Or, I have only one account installed on my Windows 10 (my administrator acc, "me" if you prefer). Is it normal to see others acc hashes ? And, I would know, how much time does it take to you to crack hashes ? (for 6 to 8 caracters password). I'll try on the real PC later in the day (I tried in order to see what will happen). Thanks for helping me !
It'll take me like 53 seconds for 6 chars, an hour for 7 and 9 days for 8 chars, but that's a full [A-z][0-9] all symbol bruteforce attack. If you know anything about the password, it helps. Even if you know there's a 9 at the end makes all the difference in the world :)
May 20, 2017 10:41 AM
(This post was last modified: May 20, 2017 10:42 AM by Beerus02.)
(May 20, 2017 07:15 AM)Sheeple Wrote: It'll take me like 53 seconds for 6 chars, an hour for 7 and 9 days for 8 chars, but that's a full [A-z][0-9] all symbol bruteforce attack. If you know anything about the password, it helps. Even if you know there's a 9 at the end makes all the difference in the world :)
How much Titan Xp do you have ? 🙂
Finally I didn't do it today because, I was in the BIOS to change the boot order, and the only option to save was "save and reset" (the description was "reset the system after saving the changes"). But I don't want to reset it ! I don't know what will happen so, I didn't try. Maybe I should switch to UEFI and after dump re-swith to legacy/EFI (don't know how do you call this).
|
