Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
JSI Tip 1984. Another Windows NT password hack.
Jerold Schulman
January 26, 2000
2 Min Read
Hack_Password.IMZ is an image file that contains a Linux kernel, and program that you image extract to a floppy (I used WinImage, but you can follow the author's instructions). I quote:
Offline NT Password & Registry Editor
Overview
This is a utility to set password, or reset password, of any user that has a valid (local) account on your NT system, by modifying the crypted password in the registrys SAM file.
You do not need to know the old password to set a new one.
It works offline, that is, you have to shutdown your computer and boot off a floppydisk. The bootdisk includes stuff to access NTFS partitions and scripts to glue the whole thing together.
Note: It will now also work with SYSKEY, including the option to turn it off!
Why?
NT stores it's user information including crypted versions of the passwordsin a file called 'sam', usually found in winntsystem32config.This file is a part of the registry, in a binary format previouslyundocumented, and not easily accessible. But thanks to a German(?) namedB.D, I've now made a program that understands the registry.As far as I know, Microsoft provides no way of changing the passwordif you cannot log in as someone with appropriate privileges, exceptrestoring the registry files from the rescuefloppy.
You don't forget passwords?
You never get boxes to admin when someone quits suddenly?
Your vendor delivers a preconfigured system to you, but never have "freak" accidents and lose the password they've set on it?
If so, what are you doing reading this?? Go read propagandafrom your favourite software vendor instead.
NOTE: If you are concerned about the ease with which this hack, and the other two password hacks on this site (tip 1864 and tip 0554), can gain Administrative access to your computer(s), remember thatThere is no security without physical security.
About the Author
You May Also Like
.jpg?width=700&auto=webp&quality=80&disable=upscale)
