This post will tell you how to break “administrator Password” of someone’s pc.
There are two ways to do this.
-:First way:-
1. Boot up pc with command prompt.
2. Change your directory into c:\windows\system32\config
3. Now delete “sam.exe” and “sam.log” files
Write del sam.exe
And write del sam.log
4. Now boot pc with window and password will be blank.
Note:- this will work only if the hard drive is of FAT type.
-:Second way:-
1. Remove the hard disk from the cpu.
2. Attach this hard disk with another pc. And make this hard disk secondary.
3. Now boot pc with window.
4. Open the drive in which window of secondary hard disk Is installed.
5. Open windows/system32/config.
6. Delete sam.exe and sam.log.
7. Now remove secondary hard disk and attach this with its own cpu.
8. Now start window and password will be blank
***************************************************************************
How to Hack Windows Administrator Password
This hack will show you how to reset Windows administrator password (for Win 2000, XP, Vista and Win 7) at times when you forget it or when you want to gain access to a computer for which you do not know the password.
Most of us have experienced a situation where in we need to gain access to a computer which is password protected or at times we may forget the administrator password without which it becomes impossible to login to the computer. So here is an excellent hack using which you can reset the password or make the password empty (remove the password) so that you can gain administrator access to the computer. You can do this with a small tool called Offline NT Password & Registry Editor. This utility works offline, that means you need to shut down your computer and boot off your using a floppy disk, CD or USB device (such as pen drive). The tool has the following features.
- You do not need to know the old password to set a new one
- Will detect and offer to unlock locked or disabled out user accounts!
- There is also a registry editor and other registry utilities that works under linux/unix, and can be used for other things than password editing.
How it works?
Most Windows operating systems stores the login passwords and other encrypted passwords in a file called sam (Security Accounts Manager). This file can be usually found in \windows\system32\config. This file is a part of Windows registry and remains inaccessible as long as the OS is active. Hence it is necessary that you need to boot off your computer and access this sam file via boot. This tool intelligently gains access to this file and will reset/remove the password associated with administrator or any other account.
The download link for both CD and floppy drives along with the complete instructions is given below
Offline NT Password & Reg Editor Download
It is recommended that you download the CD version of the tool since floppy drive is outdated and doesn’t exist in today’s computer. Once you download you’ll get a bootable image which you need to burn it onto your CD. Now boot your computer from this CD and follow the screen instructions to reset the password.
Another simple way to reset non-administrator account passwords
Here is another simple way through which you can reset the password of any non-administrator accounts. The only requirement for this is that you need to have administrator privileges. Here is a step-by-step instruction to accomplish this task.
1. Open the command prompt (Start->Run->type cmd->Enter)
2. Now type net user and hit Enter
3. Now the system will show you a list of user accounts on the computer. Say for example you need to reset the password of the account by name Sum, then do as follows
4. Type net user Sum * and hit Enter. Now the system will ask you to enter the new password for the account. That’s it. Now you’ve successfully reset the password for John without knowing his old password.
So in this way you can reset the password of any Windows account at times when you forget it so that you need not re-install your OS for any reason. I hope this helps.
***************************************************************************
( Password Clearing: Clearing out any windows password )
{ The Offline Windows Password & Bootdisk }
- Background
- The Offline Windows Password & Bootdisk / CD work from Windows NT to Windows 7.
- For the purposes of this lab, we are pretending that you are locked out of the administrator, instructor and student accounts.
- Reference Link:
- http://www.pogostick.net/~pnh/ntpasswd/
- Login to a Windows machine that is connected to a USB drive.
- For my students, it would be your lab or personal machine.
- For those of you that do not have access to my class, you can download the file to your hard drive, flash drive or burn it to a CD/DVD.
- On the Windows machine that is connected to the USB drive, go to http://www.pogostick.net/~pnh/ntpasswd/
- Click on the Bootdisk Button.
- Scroll down and click on cd110511.zip (See Below)
- When saving the file.
- Navigate to your USB, Flash or Hard-drive
- In my case, I am putting the file in the following location on my USB Drive.
- D:\Recover Password\
- Click Save (See Below)
- When Extracting the File
- Open Up Windows Explorer
- Navigate to your location where you saved the file.
- In my case, D:\Recover Password\
- Click on Extract to cd110511.
- Check to make sure file was extracted
- In my case, I am verifying file was extracted to D:\Recover Password\cd110511\
| Section 1: Set up Instructor VM to boot cd110511 |
- Start up your VMware Player
- Go to File --> Open a Virtual Machine
- Select your Instructor VM.
- Edit Virtual Machine Settings (See Below)
- Highlight CD/DVD (IDE)
- Note: We will tell your VM Image to boot from the ISO password utility.
- Setting Location to ISO file.
- Click the Use ISO image file radio button.
- Browse to where file cd110511.iso is located.
- In my case, D:\Recover Password\cd110511\cd110511.iso.
- Click OK, after you select the ISO.
| Section 2: How to boot the Instructor VM into the ISO Image |
- Start your Virtual machine
- Proceed Quickly to the next step.
- Booting from the ISO
- At the same time, Click the right mouse key and the ESC button, when the screen starts to change to the vmware screen below.
- Note: This might take you a few times so be patient!!!
- Selecting from the Boot Menu (See Below)
- Select CD-ROM Drive by using your down arrow.
- Using the Windows Reset Password Utility.
- Just press enter at the "boot:" prompt.
- Selecting the Partition
- The default partition will be already set to "1".
- Just press enter.
- Do you wish to force it? y
- Select "y" and press enter.
- Setting the path to the registry directory
- Setting the password reset registry.
- Select 1, and press enter.
- Edit User Data and Passwords
- Select 1 and Press Enter.
- Select User whose password you wish to blank out.
- The default is usually "Administrator"
- Just press Enter.
- Clear User Password
- Select 1 and Press Enter
- If successful, you will see the message "Password Cleared!"
- Selecting another user to clear their password
- Select "!" and press enter.
- Clear the Instructor Account
- Type "Instructor" and press Enter
- To clear the Instructor password
- To Quit making changes
- Type "!" and Press Enter
- Type "q" and Press Enter
- For Proof of Lab press the PrtScn Button and paste into a word document
- Saving your changes
- To save your work, Type "y" and Press Enter
- To escape out of the run, Type "n" and Press Enter
- To fire up the Windows Operating System, Type "reboot" and Press Enter
| Section 3: Logging in to Instructor VM after clearing passwords |
- On the Instructor VM
- Select from the menu: Virtual Machine Settings... --> Send Ctrl+Alt+Del
- Log in as Instructor or Administrator
- Reset your Instructor Password
- Select Start --> Control Panel
- Select Administrative Tools
- Select Computer Management
- Click on Users, Under Local Users and Groups, Click on Users
- Right Click on Administrator, Click on Set Password,
Click on the Proceed.
- Reset the Instructor password to the class standard password, or if you are not in my class to whatever you like.
- Repeat this procedure for any passwords you cleared earlier.
- Do a screen print of Section 2, Step 15.
- Paste to a word document
- Submit to moodle.
***************************************************************************
This trick generally works for most of the 3rd party applications, here we won't use any kind of time stopper or lame stuff like that. What we will do is clear tracks so that app doesn't realize we used the software before uninstalling it and are reinstalling it.
