Results 1 to 5 of 5

Thread: Unable to wirte to SAM file

  1. #1
    Just burned his ISO
    Join Date
    Aug 2009
    Posts
    11

    Default Unable to wirte to SAM file

    OS: Win 7 Ultimate on an imac (if that makes a difference)

    Steps:

    umount /dev/sda3
    mount -o rw /dev/sd3 /mnt/sda3
    cd /pentest/password/chntpw
    chntpw -i /mnt/sda3/Windows/System32/config/SAM

    option: 1 to edit user data
    username for the account
    option: 1 to clear passwd (pasword cleared!!)
    !
    -q
    y
    reboot

    After reboot pswd is still there, also tried unlocking user account and Admin, doesnt work either.

    this is the only method thats worked for me in tha past, dont really know whats going on but im not really experienced.

    Any other suggestions or help would be appreciated.

    ty

  2. #2
    Good friend of the forums
    Join Date
    Jan 2010
    Location
    outside chicago, il
    Posts
    442

    Default Re: Unable to wirte to SAM file

    I would suggest trying the steps you outlined again. This time watch for any warnings and/or informational messages. I will admit that I have used chntpw quite a bit and once in awhile I have to do the reset 3 or 4 times before it works. I never was able to track down a reason or common configuration. Once I had to take the hard drive out of the PC and put into another computer with a different IDE controller. There was something about that particular PC that caused me nothing but problems.
    I like the bleeding edge, but I don't like blood loss

  3. #3
    Just burned his ISO
    Join Date
    Aug 2009
    Posts
    11

    Default Re: Unable to wirte to SAM file

    ok thanks for the reply, ill try it a few times, i was trying the rainbow table method but i was getting this error "Error opening sam hive or not valid file" with samdump2, ill outline the steps later

  4. #4
    Just burned his ISO
    Join Date
    Aug 2009
    Posts
    11

    Default Re: Unable to wirte to SAM file

    Also tried rainbowtable method as follows:

    bkhive /mnt/sda3/Windows/System32/config/system key

    samdump2 /mnt/sda3/Windows/System32/config/sam key
    samdump2 /mnt/sda3/Windows/System32/config/sam key >~/Desktop/password.txt

    john ~/Desktop/password.txt -users=username

    password comes up in caps, tried in caps, lowercase, 1st letter cap, nothing..

    submitted the hash to plain-text.info, now im waiting, very frustrating

  5. #5
    Good friend of the forums
    Join Date
    Jan 2010
    Location
    outside chicago, il
    Posts
    442

    Default Re: Unable to wirte to SAM file

    You probably cracked the LM hash and as such the password returned is the uppercase version. You have to do:
    john ~/Desktop/password.txt -users=username -f:nt
    to crack the case sensitive version.

    You can also use mdcrack if you have a windows machine handy. WINE and mdcrack 1.83 don't work together.
    Since you have the password in uppercase you can feed the uppercase AND lowercase letters to mdcrack and it will crack the password much faster.

    Read the password cracking guide for more information.
    http://www.backtrack-linux.org/forum...e.html#post160
    I like the bleeding edge, but I don't like blood loss

Similar Threads

  1. Unable to update - BT4
    By Nirmal jose in forum OLD BT4 Feature Requests
    Replies: 1
    Last Post: 02-12-2010, 01:06 AM
  2. Replies: 0
    Last Post: 09-03-2008, 08:05 AM
  3. better file info than file/strings
    By kr0m3 in forum OLD General IT Discussion
    Replies: 0
    Last Post: 07-24-2008, 01:25 PM
  4. Tranfert .txt file in Inbox thunderbird file
    By danathane in forum OLD Newbie Area
    Replies: 1
    Last Post: 07-21-2008, 07:57 AM
  5. Unable to Deauth
    By Sexington in forum OLD Newbie Area
    Replies: 6
    Last Post: 07-06-2007, 06:29 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •