trouble with samdump2 - ODB686 - 05-09-2018
Hi guys,
I was trying to hack Windows 10 password using the command "sumdump2" and "Free password hash cracker" tool, but for some reason, I`m not able to do that...
Code: root@The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali):~# cd Desktop
root@The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali):~/Desktop# mkdir mount
root@The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali):~/Desktop# fdisk -l
Disk /dev/sda: 223.6 GiB, 240057409536 bytes, 468862128 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disklabel type: dos
Disk identifier: 0x655611d6
Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 206847 204800 100M 7 HPFS/NTFS/exFAT
/dev/sda2 206848 467066536 466859689 222.6G 7 HPFS/NTFS/exFAT
/dev/sda3 467066880 468858879 1792000 875M 27 Hidden NTFS WinRE
Disk /dev/sdb: 465.8 GiB, 500107862016 bytes, 976773168 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 4096 bytes
I/O size (minimum/optimal): 4096 bytes / 4096 bytes
Disklabel type: dos
Disk identifier: 0x3d269637
Device Boot Start End Sectors Size Id Type
/dev/sdb1 * 2048 206847 204800 100M 7 HPFS/NTFS/exFAT
/dev/sdb2 206848 976771071 976564224 465.7G 7 HPFS/NTFS/exFAT
Disk /dev/sdc: 28.9 GiB, 31004295168 bytes, 60555264 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disklabel type: dos
Disk identifier: 0xa9ef3e16
Device Boot Start End Sectors Size Id Type
/dev/sdc1 * 64 5734399 5734336 2.8G 17 Hidden HPFS/NTFS
/dev/sdc2 5734400 5735807 1408 704K 1 FAT12
Disk /dev/loop0: 2.5 GiB, 2679435264 bytes, 5233272 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
root@The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali):~/Desktop# mount /dev/sda2 mount
root@The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali):~/Desktop# cd /root/Desktop/mount/Windows/System32/config
root@The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali):~/Desktop/mount/Windows/System32/config# samdump2 SYSTEM SAM > /root/Desktop/hash.txt
root@The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali):~/Desktop/mount/Windows/System32/config# cat /root/Desktop/hash.txt
*disabled* Администратор:500:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
*disabled* Гость:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
*disabled* :503:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
*disabled* :504:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
DANILA:1001:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
:1016:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
root@The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali):~/Desktop/mount/Windows/System32/config#
As you can see, all NTLM hashes the same and special tool for cracking says that my profile "DANILA" doesn`t have any password, but he does...
RE: trouble with samdump2 - royce - 05-09-2018
Posting real hashes is against the forum rules.
The hashes above are special LM and NTLM hashes that indicate an empty/non-set password.
If you're using something called a "Free password hash cracker" ... if that's not hashcat, then it's off topic for this forum.
RE: trouble with samdump2 - ODB686 - 05-09-2018
Sorry for off topic...
I knew that "The hashes above are special LM and NTLM hashes that indicate an empty/non-set password" but I have some password`s, so they don`t have to be like they are
|