| View previous topic :: View next topic |
| Author |
Message |
iTz SWAT
I post too much
 Reputation: 1
Joined: 20 Dec 2007
Posts: 2227
Location: Me.Location;
|
 Posted: Mon Aug 10, 2009 7:24 am Post subject: |
 |
|
| Burningmace wrote: | | This is the problem, he can't boot from CD because the BIOS is passworded. |
Using the same download page as above, he can install OphCrack, which is different to Cain and Abel so try it out...
_________________
|
|
| Back to top |
|
 |
Haswell
Grandmaster Cheater
![]() Reputation: 10
Joined: 24 Nov 2007
Posts: 703
|
| Posted: Mon Aug 10, 2009 7:30 am Post subject: |
|
|
| Referring back to my method of extracting the SAM, it it possible to be done via boot.ini? |
|
| Back to top |
|
|
Polynomial
Grandmaster Cheater
![]() Reputation: 5
Joined: 17 Feb 2008
Posts: 524
Location: Inside the Intel CET shadow stack
|
| Posted: Mon Aug 10, 2009 7:36 am Post subject: |
|
|
| iTz SWAT wrote: | | Burningmace wrote: | | This is the problem, he can't boot from CD because the BIOS is passworded. |
Using the same download page as above, he can install OphCrack, which is different to Cain and Abel so try it out... |
The msiexec.exe process requires administrator privelidges. You cannot install programs in limited accounts.
You can't extract the SAM via boot.ini either.
If you have a second machine, take out the hard drive of the target machine and plug it into your machine as a slave (do not boot from it). Then load up a live CD and use NTPWEdit to alter the SAM. Put the drive back into the target machine and boot. You'll be able to log in. If you just want at the files, you can put the drive in your machine as a slave and read them like any other disk. If you're using a laptop and/or can't put the drive in your machine, you can by an IDE/SATA to USB cable for about £8 (roughly $14 or €10). This means you can simply run the drive as a USB mass storage device. |
|
| Back to top |
|
|
Luigi
Grandmaster Cheater Supreme
 Reputation: 1
Joined: 24 Mar 2008
Posts: 1083
|
| Posted: Mon Aug 10, 2009 9:43 pm Post subject: |
|
|
| Burningmace wrote: | | This is the problem, he can't boot from CD because the BIOS is passworded. |
When I boot from CD's, I don't use the BIOS, I just press F8 then select my CD drive. I know F8 is the windows advanced options, but it works for me. |
|
| Back to top |
|
|
Twilly
Grandmaster Cheater Supreme
![]() Reputation: 0
Joined: 05 Dec 2007
Posts: 1645
Location: Singapore
|
| Posted: Tue Aug 11, 2009 3:26 am Post subject: |
|
|
| Luigi wrote: | | Burningmace wrote: | | This is the problem, he can't boot from CD because the BIOS is passworded. |
When I boot from CD's, I don't use the BIOS, I just press F8 then select my CD drive. I know F8 is the windows advanced options, but it works for me. |
Woah? I never knew that you could boot a CD without going to BIOS. When I press F8, I just landed in the place where it showed the safe mode boot etc.
I'll try it out later. I've got OphCrack burned to a CD long ago ;D
_________________
|
|
| Back to top |
|
|
Polynomial
Grandmaster Cheater
![]() Reputation: 5
Joined: 17 Feb 2008
Posts: 524
Location: Inside the Intel CET shadow stack
|
| Posted: Tue Aug 11, 2009 4:02 am Post subject: |
|
|
You're pressing F8 at the OS, he's talking about a BIOS-specific feature called a boot device manager. Some BIOSes allow you to press a key during POST (before the OS begins loading) to choose the boot device.
Older BIOS versions don't tend to have this - my AMD AthlonXP machine (yeah, it's good old Socket A) doesn't have it, nor does my Intel P4 machine. However, my newer Asus P5N32-E Socket 775 board has it, as does my dad's Core 2 laptop.
_________________
It's not fun unless every exploit mitigation is enabled.
Please do not reply to my posts with LLM-generated slop; I consider it to be an insult to my time. |
|
| Back to top |
|
|
Twilly
Grandmaster Cheater Supreme
![]() Reputation: 0
Joined: 05 Dec 2007
Posts: 1645
Location: Singapore
|
| Posted: Tue Aug 11, 2009 4:55 am Post subject: |
|
|
| Burningmace wrote: | You're pressing F8 at the OS, he's talking about a BIOS-specific feature called a boot device manager. Some BIOSes allow you to press a key during POST (before the OS begins loading) to choose the boot device.
Older BIOS versions don't tend to have this - my AMD AthlonXP machine (yeah, it's good old Socket A) doesn't have it, nor does my Intel P4 machine. However, my newer Asus P5N32-E Socket 775 board has it, as does my dad's Core 2 laptop. |
Oh okay. Thanks for the explanation... Had a high hope though when I read what Luigi posted.
Looks like my computer is pretty hard to crack 
_________________
|
|
| Back to top |
|
|
Polynomial
Grandmaster Cheater
![]() Reputation: 5
Joined: 17 Feb 2008
Posts: 524
Location: Inside the Intel CET shadow stack
|
| Posted: Tue Aug 11, 2009 5:08 am Post subject: |
|
|
Can you take the hard disk out and put it in another machine that you are able to boot from CD on?
_________________
It's not fun unless every exploit mitigation is enabled.
Please do not reply to my posts with LLM-generated slop; I consider it to be an insult to my time. |
|
| Back to top |
|
|
Twilly
Grandmaster Cheater Supreme
![]() Reputation: 0
Joined: 05 Dec 2007
Posts: 1645
Location: Singapore
|
| Posted: Thu Aug 13, 2009 4:26 am Post subject: |
|
|
| Burningmace wrote: | | Can you take the hard disk out and put it in another machine that you are able to boot from CD on? |
Nope. Any other hopes? :/
_________________
|
|
| Back to top |
|
|
Haswell
Grandmaster Cheater
![]() Reputation: 10
Joined: 24 Nov 2007
Posts: 703
|
| Posted: Thu Aug 13, 2009 4:35 am Post subject: |
|
|
| Plug your own hard drive in to boot and slave the original drive to extract the SAM? |
|
| Back to top |
|
|
NINTENDO
Grandmaster Cheater Supreme
![]() Reputation: 0
Joined: 02 Nov 2007
Posts: 1371
|
| Posted: Thu Aug 13, 2009 5:01 am Post subject: |
|
|
No it's not fucking possible for a limited user to become a administrator.
End of story question is answered. Lock thread please.
Guesning the admin password is an other thing..
_________________
Intel over amd yes. |
|
| Back to top |
|
|
compactwater
I post too much
![]() Reputation: 8
Joined: 02 Aug 2006
Posts: 3923
|
| Posted: Thu Aug 13, 2009 6:31 am Post subject: |
|
|
| KaninKnull wrote: | No it's not fucking possible for a limited user to become a administrator.
End of story question is answered. Lock thread please.
Guesning the admin password is an other thing.. |
You are very wrong.
As already stated, the password can be retrieved from the SAM file hashes and then cracked on another machine, or cracked on a live CD. The passwords can also be phished/keylogged, but that's going through a bit more trouble than necessary to acquire the information, and it's also more traceable.
Another note, Cain and Abel only works on an administrator account, so finding the administrator password through that is really pointless unless you have access to an admin account but somehow do not know the password (eg. admin forgets to log out).
"Guessing" an administrator's password would be very time consuming, and only possible if the password's affiliation is known (eg. a band's name). There are also other problems, as some machines may have a custom login that will lock accounts if a certain number of login attempts is reached. In the long run, this is simply an implausible way of accessing an administrator's account unless the admin is an idiot.
But, to be fair, you said it is not possible for a limited user to become an administrator, which is mostly true. I personally do not know of any exploit to become an administrator from a limited user account, so I'll leave it be. But, becoming an administrator suddenly wouldn't look so good if any information is reviewed or logged, and the administrator will also know the user who has "hacked" the system. Consequences following. |
|
| Back to top |
|
|
NINTENDO
Grandmaster Cheater Supreme
![]() Reputation: 0
Joined: 02 Nov 2007
Posts: 1371
|
| Posted: Thu Aug 13, 2009 6:44 am Post subject: |
|
|
| compactwater wrote: | | KaninKnull wrote: | No it's not fucking possible for a limited user to become a administrator.
End of story question is answered. Lock thread please.
Guesning the admin password is an other thing.. |
You are very wrong.
As already stated, the password can be retrieved from the SAM file hashes and then cracked on another machine, or cracked on a live CD. The passwords can also be phished/keylogged, but that's going through a bit more trouble than necessary to acquire the information, and it's also more traceable.
Another note, Cain and Abel only works on an administrator account, so finding the administrator password through that is really pointless unless you have access to an admin account but somehow do not know the password (eg. admin forgets to log out).
"Guessing" an administrator's password would be very time consuming, and only possible if the password's affiliation is known (eg. a band's name). There are also other problems, as some machines may have a custom login that will lock accounts if a certain number of login attempts is reached. In the long run, this is simply an implausible way of accessing an administrator's account unless the admin is an idiot.
But, to be fair, you said it is not possible for a limited user to become an administrator, which is mostly true. I personally do not know of any exploit to become an administrator from a limited user account, so I'll leave it be. But, becoming an administrator suddenly wouldn't look so good if any information is reviewed or logged, and the administrator will also know the user who has "hacked" the system. Consequences following. |
You know what the fuck I mean so shut the fuck up bish.
_________________
Intel over amd yes. |
|
| Back to top |
|
|
compactwater
I post too much
![]() Reputation: 8
Joined: 02 Aug 2006
Posts: 3923
|
| Posted: Thu Aug 13, 2009 6:59 am Post subject: |
|
|
| KaninKnull wrote: | | You know what the fuck I mean so shut the fuck up bish. |
Yes, I do understand what you mean. I stated that in my reply, but apparently you did not understand that nor take the time to actually read my reply. If you have no further constructive input to give to the conversation, then please do not make an attempt to reply, as you are only further damaging your own self-image at this point. I would also like to note that your use of profanity is overdone and meaningless, it only serves to "dumb down" the merit and validity of your reply. I'd much rather listen to someone who is calmly explaining a situation, rather than having spasms of profanity. And more over, you gave a very static reply, as if your word should be the very last to be spoken, as if there are no possible contradictions or corrections to be made. Clearly, as you can see, there are many mistakes you have made in only four small lines. But I'm certain by this time you've already stopped reading. And I understand, knowledge is just so boring you could not possibly thirst for more! But hey, if you made it this far, you might just have something worthwhile to reply with. Good day, sir. |
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
