john-users - Re: cant crack the SAM file....plz help

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / NEWS community lists Wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [month] [year] [list]

Date: Sun, 30 Apr 2006 20:58:45 +0200 (CEST)
From: rembrandt@...erlin.de
To: john-users@...ts.openwall.com
Subject: Re: cant crack the SAM file....plz help

> i retrieved the SAM file from my other win xp computer and brought it to
> this one (a winME computer)
> i got the latest jtr program (1701)
> and ran it from my dos prompt with this command:
>
> john-386 sam
>
> and it said:
> "no password hashes loaded"
>
> now i know that this is in the faq!!
> but none of the answers seem to match my situation
> someone please help me with cracking the SAM file.....thnx

Read the list-archives..
We had this discussions already a LOT times..
And until Solar will include a tool for it they wont end.. I think :)

You need to remove the syskey and then dump the Passwords into a File.

bkhive (unsyskey) and pwdump3 (unsam) or 4 can do it.
The output of this stuff can be handled by john.

Rembrandt