Cracking Windows

This post helps you to bypass Windows, Mac, Linux User Passwords using some famous old and new tools. This is for educational purpose. Most of us uses multiple password and times we forget the password, we set. There is quick solution to overcome this, just install the operating system again. Yep that will solve the problem. But the next things like setting up the environment, configuring takes lot of time and it is worst thing to do. Recently my sister forgot her system password, and she can’t just install os because there is lot of important data. One simple way is to do managing *dot files*.

**Backup**, restore**, and sync the prefs and settings for your toolbox. Your dotfiles might be the most important files on your machine.

Dotfiles might not fulfil all the needs. Like there will be important images, videos which you can’t afford to loose. Either backup to a external hard drive, or may be to cloud (s3 is my personal choice). You can automate this with scripts and all. But still there are chances there will be few files which you might forgot to backup or created very recently. In order to get this files, you need to crack login. Let’s begin.

There might be hundreds of methods to crack, I’ll talk about it very famous and easy to do methods.

0phcrack is the ancient still updating tool to crack passwords. The latest release version is 0phcrack 3.7.0 on March 30, 2017. For an average password its takes around 30 to 40 minutes when working on general pc for average user password. Accuracy of this tool was around 60–70% when I was testing. But with the latest release, I heard it’s improved. You can see the change log of this here and source code on GitLab. Oneway you can protect your pc from this is to set the password of minimum length 14 digits.

PC Login Now is another tricky tool. I called it a tricky tool because, instead of cracking the password, it deletes the password so that you can login to pc without password. Once you login, you can new password without knowing the old password. Remember, Even though the system registry is protected by Syskey, PC Login Now can easily bypass this mechanism and reset the Windows passwords. It’s no longer freely available by it’s developer.

Konboot is the best tool till now to crack login passwords. It can crack Linux, Mac, windows passwords as well with just one click. It’s hardly takes 3 seconds to crack the password with konboot. All you need to do is boot your pc with live CD/USB which hosts konboot. It can even crack the passwords which are locked with social/email accounts.

For hackers (those who do), you can reset windows password by booting it up with linux live CD/USB and deleting the “SAM Files”. To prevent this, you can set lock to your registry. To do this, Win+R, type syskey, choose select update, select password setup, now a type a password and update it. SYSKEY was an optional feature added in Windows NT 4.0 SP3. It was meant to protect against offline password cracking attacks so that the SAM database would still be secure even if someone had a copy of it. Don’t forget your syskey password. If so, you can’t open your pc.

Q) What if you have less time & want to hack into the pc? Just carry a konboot burned USB all the time. Just 3 seconds 😉. The remaining time is boot up the PC.

Q) I can’t use Konboot every time, how to crack the password after I enter into the the pc? Boot into the pc once with konboot and then use cain and able tool to crack the password of the user account. From next time, use that password.