John the Ripper

[mk777]

Hello, I'm very new at penetration tests, and have just started learning them at my current job.  I have tried using BackTrack, however my boss suggested using Backbox. 

I am trying to use John the Ripper to extract XP, Windows 2003, 2008, and 7 passwords.  However, I'm not sure how to accomplish this without bkhive and samdump2. 

Any thoughts?

Thanks

[ZEROF]

Hi mk777,

Before using John, learn how to use chntpw tool, he comes with BackBox. But to get SAM file you just need to boot with BackBox Live CD, and mount windows partition, then you will find that partition inside /media folder in BackBox. Then go to /media/YOUR WINDWOS HARD DISK/WINDOWS/System32/config/, and you will see file SAM, open it and do what you need to do :). chntpw tool can help you to get all information or remove users, edit passowrd etc ..it's a good tool.

[phlegm]

...Ophcrack

[ostendali]

Hi mk777,

Before using John, learn how to use chntpw tool, he comes with BackBox. But to get SAM file you just need to boot with BackBox Live CD, and mount windows partition, then you will find that partition inside /media folder in BackBox. Then go to /media/YOUR WINDWOS HARD DISK/WINDOWS/System32/config/, and you will see file SAM, open it and do what you need to do :). chntpw tool can help you to get all information or remove users, edit passowrd etc ..it's a good tool.

+1 ;)