How to Remove a Windows Password with a Linux Live CD « Null Byte :: WonderHowTo

Back when I was a Windows user, I know I'm not the only one who has experienced password loss—that moment where you just can't remember your password. Sometimes it happens to the best of us. So, how can we get into the system without paying a local geek or geeksquad to do it? First, we have to look into how Windows stores their passwords.When Windows saves your user passwords, it stores them in a SAM file. It stores users'passwordsin a hashed format (inLM hashandNTLMhash). Since ahash functionis one-way, this provides some measure of security for the storage of the passwords. However, this can still be bruteforced.Some time ago there was an exploit that allowed you to delete the SAM file and log into any account without a password. This is fixed, since Windows no longer allows access to the SAM file while Windows is running. For thisNull Byte, we are going to use a Linux Live CD to remove a Windows password using thechntpwtool.RequirementsBackTrack 5on a DVD, or a Linux install with chntpwA password on a Windows installationStep1Boot From BackTrackText in bold is a terminal command.Put the disc in your computer.Hit the the setup button.Change CD/DVD to be first on the boot order.Exit the setup and save your settings.When you get to the console, boot with;user:rootpaswword:toor.Boot into the KDE desktop environment:startxOpen a terminal.Step2Mount Drive & Change Windows PasswordNow we have to mount the Windows drive partition to modify the password, or remove it completely.First, wehave to mount the hard drive partition that the Windows installtion is located on..mount /dev/sda1 /mnt/Change to the directory that the SAM file is in so that we can prepare to modify its contents.cd /mnt//Windows/System32/configList the users on the computer contained in the SAM file.chntpw -l SAMChange a specific user account password.chntpw -u USERNAME SAMNow, lets unmount the drive and boot from Windows to use the updated or cleared password.umount /dev/sda1If you have any questions regarding today's post, feel free to join us onIRC. Also, follow me onTwitterfor the latest Null Byte updates.Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseRelatedHow To:Recover Passwords for Windows PCs Using OphcrackHow To:Hack a Windows 7/8/10 Admin Account Password with Windows MagnifierHow To:Reset Windows Password with a Windows CD or a Linux CDHow To:Extract Windows Usernames, Passwords, Wi-Fi Keys & Other User Credentials with LaZagneHow To:Remove Ubuntu and the GRUB LoaderHow To:Bypass Windows Passwords Part 1How To:Bypass Locked Windows Computers to Run Kali Linux from a Live USBHow To:Remove a Password from Log in Screen in Linux MintHow To:Set Up Private Internet Access in LinuxHack Like a Pro:Linux Basics for the Aspiring Hacker, Part 1 (Getting Started)How to Hack Like a Pro:Getting Started with MetasploitHow To:Run Kali Linux as a Windows SubsystemHow To:Recover a Windows Password with OphcrackHow To:Bypass Windows and Linux PasswordsHow To:Recover WinRAR and Zip PasswordsHow To:Scan for Viruses in Windows Using a Linux Live CD/USBHow To:Run Windows from Inside LinuxNews:Complete Arch Linux Installation, Part 1: Install & Configure ArchHow To:Stream Media to a PS3 or Xbox 360 from Mac & Linux ComputersNews:MULTIBOOT CDSecure Your Computer, Part 1:Password-Protect your BIOS Boot ScreenHow To:How Hackers Take Your Encrypted Passwords & Crack ThemHow To:Create a Custom Arch Linux DistroHow To:Use Cygwin to Run Linux Apps on WindowsHow To:Carve Saved Passwords Using CainRainbow Tables:How to Create & Use Them to Crack PasswordsHow To:Sneak into Your Roommate's Computer by Bypassing the Windows Login ScreenSecure Your Computer, Part 2:Password-Protect the GRUB Bootloader on Dual-Booted PCsHow To:Windows 7 Won't Boot? Here's How To Fix Your Master Boot RecordHow To:Make an Unbreakable Linux Password Using a SHA-2 Hash AlgorithmHow To:log on Windows 7 with username & passwordNews:Performance Hacks & Tweaks for LinuxHow To:Recover Deleted Files in LinuxNews:Windows Live SkyDriveHow To:Run a Free Web Server From Home on Windows or Linux with ApacheHow To:Encrypt your Skype Messages to Thwart Snooping Eyes Using PidginHow To:Customize Your Linux DesktopHow To:Mask Your IP Address and Remain Anonymous with OpenVPN for LinuxHow To:Avoid Root Password Reset on Kali Live USB Persistence BootNews:Cannot find windows loader after Linux install?