- This topic has 13 replies, 11 voices, and was last updated 10 years, 6 months ago by
hayabusa.
-
AuthorPosts
-
-
April 19, 2010 at 5:06 pm #4952
Anonymous
ParticipantHelp! I am at my wits end. Can anyone decode this NT hash for my wifes computer, I screwed up the password, and can’t get back in. She has all here photos stored on this computer, and I don’t want to be responsible for loosing them. I tried OPHCRACK live CD with the free tables, with no success, system is Vista.
NT hash = 7883959c919eafeb76f893f4f9426929
Any help would be greatly appreciated
-
April 19, 2010 at 5:49 pm #31165
UNIX
ParticipantMay I ask how you screwed it up? Just curious. 🙂
-
April 19, 2010 at 6:48 pm #31166
Anonymous
ParticipantDecided to reset her password as a joke, after having had a few too many, must have made a typo, now I can’t logon, no admin account – in deep crap.
-
April 19, 2010 at 7:39 pm #31167
pizza1337
Participantanyone else think its fishy?
[align=center:1nyolx87]>[/align:1nyolx87]
-
April 19, 2010 at 7:42 pm #31168
ziggy_567
ParticipantWhether or not its fishy…Clueless would be the most able to crack the hash since he probably has “some” idea of what the password would be. If anyone else were to crack it, it would ultimately become a brute force attempt.
-
April 19, 2010 at 8:15 pm #31169
n1p
ParticipantYes, I second that. You will roughly have the character length and possible variations. You obviously entered the pass twice to change it, so you cant be that far wrong. With this in mind you can significantly reduce the required searchable keyspace. So stick with it…
You could also try having a few more beers and trying again. Might get lucky… or unlucky
-
April 20, 2010 at 1:45 am #31170
rattis
Participantreally, don’t need to crack it. if you have physical access to the computer there are tools out there that let you reset windows passwords. I use TRK (Trinity Rescue Kit) at work, and have yet to lose data.
-
April 20, 2010 at 3:57 am #31171
dynamik
ParticipantThere’s not another administrator account on the machine where you can just reset it?
As mentioned earlier, there are utilities, such as konboot, that can reset passwords.
You might want to hold off on either method if she was using EFS though.
-
April 20, 2010 at 8:24 am #31172
j0rDy
Participantno need to crack it. people tend to underestimate the power of physical access to the machine. there are plenty of tools (mostly linux based) that can boot as a live CD and reset the current password to whatever you want (even null) this is the easiest and most efficient way of resetting the password. Giving the fact you changed it to something random i’d say there is no need to crack it to find out what the password was. Good Luck!
-
April 21, 2010 at 5:32 pm #31173
DavidW
ParticipantWith this being your wife’s computer and the fact that you have physical access to it, as a last resort if you can’t reset the password so you can gain access you could remove the hard drive from her computer and connect it to another. Once you boot the computer you would just copy the contents over from one hard drive to another and then format, reload and then copy the backed up data over to her computer again. If this is a laptop you would need a device to connect the hard drive to another system but this would be no problem with a PC. Before you go that route though what OS is your wife’s computer running? Once that is answered I will have more suggestions to try.
-
April 21, 2010 at 5:51 pm #31174
ziggy_567
ParticipantMy guess would be Windows since he’s asking about a NT Hash.
😉 -
April 21, 2010 at 7:01 pm #31175
DavidW
ParticipantI was assuming Windows as well and should have worded it as such I guess :). I should have just mentioned it in my previous post about trying to log on to XP using administrator as the log in with no password and not being able to use the administrator account in Windows Vista and 7 to try this since it is disabled by default. If it helped that’d be less work he would have to do. Just adding my two cents. 😉
-
July 5, 2010 at 8:12 pm #31176
Marcos_NJ
ParticipantI have the same problem only the PC is of a deceased person who worked for me. I believe I have quite a bit of intellectual property on the machine and I’m only able to get on the pc and retreive specific contents. The hard drive must be in tact and not placed in another computer for retreival.
I have all the MD5, NTLM, LM, SHA1 codes but all online tools return “Not Found”
I’m on a timetable here and really need to get this done.
-
July 5, 2010 at 11:55 pm #31177
hayabusa
Participant@Marcos_NJ – Boot the box to live Backtrack or Samurai cd / dvd, browse the drive(s) and get your data off of it…
-
-
AuthorPosts
- You must be logged in to reply to this topic.