Cant find SAM for Windows 2008 R2
#1
I have physical access to a Windows 2008 R2 that the client has lost his password for, and I am trying to recover the password.

I am following this guide:

I boot the PC using The-Distribution-Which-Does-Not-Handle-OpenCL-Well (Kali) Live CD
I mount the hard drive
cd /mnt/
ls

I can see the "Users" folder, but no "Windows" folder, and so I am not able to find the SAM files so I can hashcat the passwords

http://www.computersecuritystudent.com/S...G/lesson2/

I am stuck, with nothing to bruteforce

Anyone know what to do for Windows 2008 R2 password recovery? Thanks
#2
You are not mounting something right if you do not see a Windows directory.

Most likely the server has multiple partitions.

I do not know if this is the right place for this type of question either
#3
(02-10-2015, 01:26 AM)coolbry95 Wrote: You are not mounting something right if you do not see a Windows directory.

Most likely the server has multiple partitions.

I do not know if this is the right place for this type of question either

Thanks! I will try the other partitions.

I realize this isn't a Hashcat question, which is why I posted it in General Help, but I posted here because I know the users here are very helpful and experienced.
#4
I found the Windows folder after I mounted a different partition.

Thanks!