Printable View
Is it possible for someone to copy the SAM file (i know that is possible), then to insert a username and hashed password into the file then to copy it back? I'm sure it can be done if syskey is not used, but how about if it is being used? I would think that it would be possible becuase if they can decrypt it, why couldnt someone encrypt it. Is there a program out that will do this?
I know i havent posted much, but this is for educational purposes only.
I believe the hashes are in the registry as well but I dont think its possible to add users only change them as of now
for what purpose? if u can access the sam and dump passwords then u should be able to simply net user blah password /add and windows encrypts the password, so then you can dump the sam and get that value instead of trying to find a program that's gonna do it for you, plus it writes it to the sam so you don't need to inject it urself. ur question seems confusing, maybe if u gave us a scenario it would help...
Maybe he wants to secretly add a user :-P
try Offline NT Password & Registry Editor ( http://home.eunet.no/~pnordahl/ntpasswd). It features everything u asked for. Hope it helps
xiphias360: Your sig made me wiki BOFH. Honestly the first time I have heard the term :) Thanks for some interesting reading ... found it quite amusing.
:eek:Quote:
Originally Posted by Wikipedia
@Cider: lol, yeah I just downloaded bofh-excuses for fortune and added them to the random fortunes that pop up with my bash shells, some really good stuff in there. If only I had this when I was a helpdesk tech way back when... :)