Hack Security Pro.pdf - Index of

How to obtain this file:
1. When WINNT is installed, a copy of the password database (SAM file) is created in the
c:\WINNT\repair directory. This copy only contains the passwords by default created during the set
up, meaning only the administrator's password. When the administrator updates the repair disk, the
SAM file is also updated (in this case, the SAM file contains all the accounts). So we could get the
SAM file from the repair file, as this one is not locked by the core. If the repair file does not have the
SAM file, there is still another way of obtaining it.
2. The PC has to be booted from a start disk or from another operating system. This way, WINNT is
not executed and so the SAM file is not locked. We can then copy the SAM file onto a disk and
crack it later on.
The Sam file is not the only medium that can allow you to find passwords on a network using NT.
Let us take the L0phtCrack tool, which is the fastest and the most efficient to find NT passwords,
because it does not only use the SAM file to have the password hashing, but also uses the encrypting
vulnerabilities seen previously.
You can find an LC3 evaluation version at: http://www.atstake.com/research/lc3/download.html.
First of all, the assistant will ask
you which method is used to
recover the password hashing.
(If the assistant is not
automatically started, click on
the magic wand, the 6 th icon
from the left on the main
interface).
The Hackademy DMP -170/209- SYSDREAM