+- hashcat Forum (https://hashcat.net/forum)
+-- Forum: Deprecated; Previous versions (https://hashcat.net/forum/forum-29.html)
+--- Forum: General Help (https://hashcat.net/forum/forum-8.html)
+--- Thread: Cant find SAM for Windows 2008 R2 (/thread-4062.html)
Cant find SAM for Windows 2008 R2 - reils - 02-10-2015
I have physical access to a Windows 2008 R2 that the client has lost his password for, and I am trying to recover the password.
I am following this guide:
I boot the PC using The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali) Live CD
I mount the hard drive
cd /mnt/
ls
I can see the "Users" folder, but no "Windows" folder, and so I am not able to find the SAM files so I can hashcat the passwords
http://www.computersecuritystudent.com/SECURITY_TOOLS/PASSWORD_CRACKING/lesson2/
I am stuck, with nothing to bruteforce
Anyone know what to do for Windows 2008 R2 password recovery? Thanks
RE: Cant find SAM for Windows 2008 R2 - coolbry95 - 02-10-2015
You are not mounting something right if you do not see a Windows directory.
Most likely the server has multiple partitions.
I do not know if this is the right place for this type of question either
RE: Cant find SAM for Windows 2008 R2 - reils - 02-10-2015
(02-10-2015, 01:26 AM)coolbry95 Wrote: You are not mounting something right if you do not see a Windows directory.
Most likely the server has multiple partitions.
I do not know if this is the right place for this type of question either
Thanks! I will try the other partitions.
I realize this isn't a Hashcat question, which is why I posted it in General Help, but I posted here because I know the users here are very helpful and experienced.
RE: Cant find SAM for Windows 2008 R2 - reils - 02-10-2015
I found the Windows folder after I mounted a different partition.
Thanks!