We have a Windows NT 4.0 Workstation which we forgott the admin password. The admin is the only user assigned to the machine. I want to know, is there any free software out there that will let me reset or change the password of the administrator? Or how can I gain access to the Win. I will appreciate any help.
- Windows Admin Password Crack
- Windows Nt Password Cracker
- Windows Nt 4 Crack Password Reset
- Windows Nt 4 Crack Password Unlocker
What You Need for This Project
- A Kali Linux machine, real or virtual
- A Windows Server 2016 machine, real or virtual (or any other Windows version)
- The LM hash is the old style hash used in Microsoft OS before NT 3.1. Then, NTLM was introduced and supports password length greater than 14. On Vista, 7, 8 and 10 LM hash is supported for backward compatibility but is disabled by default. The goal is too extract LM and/or NTLM hashes from the system, either live or dead.
- Ophcrack Live CD – My favorite ways to blank out or crack a Windows password is to use a Linux.
Creating a Windows Test User
On your Windows machine, click Start.Type in CMD and press Shift+Ctrl+Enter.
If a 'User Account Control' box pops up,click Yes.
In the Administrator command prompt window,execute this command, which creates a user named'jose' with a password of 'P@ssw0rd'.
net user jose P@ssw0rd /add Downloading and Installing 7-Zip
In a browser, go toDownload the correct version for your operating system,which is probably the 64-bit version,as shown below.
Install itwith the default options.
Downloading and Installing Cain
In a browser, go toRight-click the downloaded file, point to7-Zip, and click'Extract Here',as shown below.
Enter a password of samas shown below. Click OK.
Double-click the ca_setup file.Install the software with the default options,as shown below.
When you see the message below, asking whether toinstall WinPcap, click the'Don't install' button.
TroubleshootingIf you get a warning box saying'Found some malware', as shown below,you need to tell Windows Defender not toremove Cain.At the lower left of the desktop, clickthe magnifying-glass 'Search' icon and typeDEFENDER. Open Windows Defender. In Windows Defender, click Settings andturn off 'Real-time protection'as shown below. Close Windows Defender and run the ca_setup fileagain. If this is your personal machine, remember to turn'Real-time protection' back on when you completethe project. |
Installing WinPcap
In a browser, go toClick 'Installer for Windows',as shown below. Download and install thesoftware with the default options.
Extracting Password Hashes with Cain
On your Windows desktop, right-click the Cainicon and click 'Run as Administrator'.If a 'User Account Control' box pops up,click Yes.
In Cain, on the upper set of tabs, clickCracker.
In Cain, move the mouse to the center of thewindow, over the empty white space.
Right-click and click 'Add to list...',as shown below.
In the 'Add NT Hashes from' box, accept thedefault selectionof 'Import Hashes from local system',as shown below,and click Next.
The password hashes appear,as shown below.
Understanding Password Hashes
There are two password hashes: LM Hashes and NT hashes.LM hashes date from the 1980's, andare so weak Microsoftno longer uses them. The LM hash values Cainshows are just dummy filler values that no longerinclude any information about real passwords.
NT hashes are Microsoft's 'more secure' hash,used by Windows NT in 1993 and never updated inany way. As you will see, these hashes are alsovery weak and easily cracked, compared with Linuxpassword hashes.
Cracking four Linux hashes took about 20 secondsusing a dictionary of 500 words when I did it,but as you will see, you can crack four Windowspasswords using a dictionary of 500,000 wordsin about a second. Windows password hashesare more than 10,000 times weaker thanLinux hashes.
Notice that your NT passwordhash for 'Jose'starts with E19CC, just like mine, shown in theimage above. This isbecause Microsoft doesn't add a random 'salt'to passwords before hashing them--every useron every Windows machine on Earth has the same saltif they are using a password of P@ssw0rd.
That means you can often crack Windows passwordhashes by just Googling them,as shown below, because manylists of common passwords and hashes havebeen uploaded to the Internet over the last20 years.
However, in this project, we'll use hashcat, which is avery powerfulway to crack passwords.
Exporting the Hash to a Text File
In Cain, right-click jose and clickExport. Save the filewith the namewin1 in the default format (L0phtCrack 2.x file).Open the win1.lc file in Notepad.
Carefully highlight the NT hash for Jose,as shown below, right-click it, and clickCopy.
12.1: Recording Your Success (5 pts.)
Use the formbelow to record your score in Canvas.If you don't have a Canvas account, seethe instructionshere.
Pasting the Password Hash into Kali Linux
In your Kali Linux machine,in a Terminal window, execute these commands: In the nano window, from the menu bar at the top,click Edit, Paste.The hash appears,as shown below:
Press Ctrl+X, Y, Enter tosave the file.
Getting a Wordlist
Kali Linux contains a list of approximately 500,000 commonlyused passwords from the RockYou breach.In a Terminal window, execute these commands to extract them:
You should see the first ten passwords,as shown below.Getting Hashcat 2.00
Hashcat updated to 3.00 and it won't run in a virtualmachine anymore. The simplest solution is to use theold version.In a Terminal window, execute these commands:
You should see four password hashes,as shown below:Cracking the Hashes
In a Terminal window, execute this command.You mayneed to use hashcat-cli32.bin on your system../hash/hashcat-cli64.bin -m 1000 -a 0 -o winpass2.txt --remove win2.hash /usr/share/wordlists/rockyou.txtcat winpass2.txtEnter the password for the hash beginning with '32ff' into the form below.
12.2: Recording Your Success (10 pts.)
Use the formbelow to record your score in Canvas.If you don't have a Canvas account, seethe instructions here.
Sources
Windows Admin Password Crack
http://www.vidarholen.net/contents/junk/files/sha512crypt.bashHashcat links updated 10-29-18
Hashstack™ is the ultimate password cracking software stack, designed and developed by the world's top password crackers for true password cracking professionals, and exclusively available on Terahash® turn-key password cracking appliances.
Optimized Workflow
Windows Nt Password Cracker
Modeled after Team Hashcat's own workflows, Hashstack™ works the way you work and is designed with team collaboration at the forefront. Hashstack™ is project-centric and list-centric rather than job-centric, which means that hash lists are logically organized by case/engagement. You may then add collaborators to each hash list, optionally organized into groups/teams, so that multiple simultaneous users may work together against multiple simultaneous hash lists. And Hashstack's™ advanced, multi-dimensional queueing mechanism and job scheduler ensures that all resources are fairly shared across the cluster, with the option to assign job priorities and resource limits. So whether you work in law enforcement, military/defense, information security, security consulting, digital forensics, or litigation support, Hashstack™ provides the perfect environment for collaborative, multi-user password cracking!
Extreme Performance
Unlike other software which only supports GPU acceleration for a small subset of available hash formats, Hashstack™ has full GPU acceleration for ALL 375+ highly-optimized hash formats. Coupled with Terahash's® finely-tuned appliances which deliver up to 35% more performance over other solutions using similar hardware, Hashstack™ offers unparalleled hash cracking performance. And unlike other software that allows you to queue up a batch of multiple hashes/files but then works on them in serial – exahusting all attacks on one file before moving on to the next – Hashstack™ works on multiple hashes in parallel, and on multiple jobs in parallel too, enabling you to find the most passwords in the least amount of time.
Windows Nt 4 Crack Password Reset
Infinitely Scalablity
One Terahash® appliance is great – 20 Terahash® appliances are better! Password cracking has exponential complexity, so there's literally no such thing as having 'too many' cracking resources. But password cracking is also an embarassingly parallel problem, and thus Hashstack™ was designed to be infinitely scalable – you can purchase and stack as many appliances as your budget permits, and Hashstack™ will fully utilize all of them for distributing password cracking jobs. Contrary to popular belief, the biggest advantage to operating a cluster of multiple Terahash® appliances is actually not the ability to utilize the raw compute power of all resources combined, but rather the ability to run many simultaneous jobs in parallel. Posting up 12 TH/s on NTLM is certainly impressive, but the ability to run 200 jobs in parallel is far more impressive and far more practical!
High Fault Tolerance
Windows Nt 4 Crack Password Unlocker
Hashstack™ is highly tolerant of failures, so having an appliance go down for any reason does not mean the jobs currently running will fail; Hashstack™ will simply route around the failure until the issue can be resolved. This resilience also enables you to add appliances on-the-fly as well: simply rack up a new appliance, and it will automatically join the cluster and begin work on the active jobs in the queue!