Printable View
Not sure if this is the right heading, but here goes.
I have a customer who just purchased a used computer. The computer is running windows XP. The problem is he does not know any of the username/password's for the computer. Is there anyway to find out this info without having to be logged in. IE some sort of boot disk or something?
Thanks
he doesn't need to know the usernames and passwords used by the previous user of this laptop.Quote:
Is there anyway to find out this info without having to be logged in
simple format the drive and reinstall the OS...like all good sales people _should_ do to second hand hdd's, to protect customer privacy and such.
I know I could format and start from scratch, but the gentlemen who bought it does not have the install disks or any of the other software that came on the machine (which we are not even sure what is on there)
Can your customer contact the person from whom he bougt it and see if they have any of the install disks?
IMO (V)/\>< is correct.
You SHOULD format and reinstall the OS just in case this person who sold it to them didn't erase any info that they don't want seen. He should contact the previous owner if he really needs the Username and pwds. They should have no problem supplying that info.
Although... technically speaking... it is possible to find out the user names several ways.
The passwords will be a bit more difficult... but that is also possible.
1.) Get a Win2k install/recovery disk. Boot to it and enter the recovey console. Because it can't read the registry... you don't have to have an admin password to enter into the recovery console. The user accounts will be listed in the ususal places... c:\Documents and Settings\username\
2.) Use knoppix/ to boot and that will give you read only access to the hard drives partitions.
Using the above info... and a little creativity... you can find out the passwords...
If you use the search button in the top right corner of the AO main page... you will find many other threads just like this with similar but some different suggestions.
I didn't mention network solutions... cause you didn't mention a NIC card... and.. how would you know what the ip addy is? Local access is going to ge the way to go...
http://www.antionline.com/search.php...by=&sortorder=
After working on box after box without the OS CD I implimented a policy that states I cannot work on any PC's without proper software. I have seen it time and time again where people expect miracles when there is nothing to work with. Not only is this a pain in the ass, but it also puts your business in jeopardy.Quote:
I know I could format and start from scratch, but the gentlemen who bought it does not have the install disks or any of the other software that came on the machine (which we are not even sure what is on there)
Yeah, you could reformat with your own copy of WinXP, but I got tired of wasting my time. Maybe you should do the same, but then again, maybe it's just me.
Jack
i would guess that the person who originally purchased the machine got a package that included the OS and software. i believe that with such packages the OS is bound to that machine, from a licencing point of view. and that you are obliged to pass on the software when reselling the machine privately. even if i am wrong here, it would be a courtesy to pass on the software.Quote:
I know I could format and start from scratch, but the gentlemen who bought it does not have the install disks or any of the other software that came on the machine (which we are not even sure what is on there)
perhaps you should encourage the person in contact with you cheyenne to ask for the discs.
I have told him to contact the seller, but I am not sure if he was able to or whether he can? If he can great, but if he cannot then I need to find another way.
I was thinking of that knoppix software, I just could not remember what the name of it was.
i doubt you have completly legitimate intentions in mind but truly i don't care so here goes...
i don't user XP but 2000 pro so in your case the accuall proccess might be different:
1. by default there are 2 local user accounts on windows system "Administrator" & "Guest"
2. dependin' on if they are disabled or not i'd recommend going for "Administrator" first
3. get this: NTFS Reader (boot floppy image extractor) & follow the directions to create bootable floppy
4. boot and read the FS then get the SAM file (i'm not gonna explain in detail what it is but the common locations are:
- %systemroot%\system32\config
- %systemroot%\repair
- In the registry under HKEY_LOCAL_MACHINE\SAM
(you don't need to worry about the reg key 'cause you are not Admin yet)
5. load it in your favorite cracker (the active accounts should be readable at this point)
first find a good dictionary file of common NT pwds like "NTAdmin" and such and use trial version of L0pth crack on it
5b then try and load the SAM into it SAMInside
after this you are on your own ..
The program is called ERD Commander, you can purchase it here, http://www.winternals.com/products/r...mander2002.asp .
Quote:
Key features:
Boots dead systems directly from CD
Easy, familiar Windows-like interface
Includes the Locksmith utility to reset lost Administrator passwords
Includes FileRestore so that you can quickly find and recover deleted files
Provides access to XP Restore Points on unbootable Windows XP systems
Compares key info on unbootable system with that of a working system for diagnosis and trouble-shooting
Allows for formatting and partitioning of disks.
Built-in network access to safely copy data to/from dead systems
Repair and diagnostic tools located on Start menu
Repair tools include Service and Driver Manager, Locksmith, FileRestore, Registry Editor, Explorer, Disk Management, and Command Prompt
Diagnostic tools include the System Compare, Event Log Viewer, System Information, TCP/IP Configuration, and Logical volumes utilities
Compatible with Windows NT, 2000, XP, and Server 2003
You're dealing with Windows XP, right? Well if that's the case then there's a much easier way to get into any of the accounts. I don't know how to crack the passwords like you asked but (assuming the previous owner is just some ignorant luser) an easier way is to just bypass them. First I would recommend that you get the XP disk somehow and just re-install windows bc then you can customize it however you like, but if you would rather just access the system then here goes. I live in a dorm, so we have a lot of fun messing with each other's computers and being able to bypass a Windows XP password is a must-have skill if you're going to have any fun :D When the computer is booting up you can use the "boot keys" which means you hit a function key (like f5 or f8) when the computer is just starting up to do something before the computer goes into windows. It is much easier to manipulate the other versions of windows, but on XP you can hit F8 repeatedly as soon as the power comes on and you'll get a menu asking what you want to do. Select "boot into safe mode" and when the welcome screen somes up there's a new account labeled "Administrator". From this account you can change (or remove) the passwords of other accounts without having to know the password! This can be disabled, but it worked on all the computers I've tried it on to date. If I missed something, please don't flame me. Thanks ;)
-keezel
I agree with you on that... this guy sells used computers and he doesn't clean the hard drives? That is wierd... and the guy buying the computer doesn't want a clean hard drive? Sounds like some wants to do some cracking..Quote:
Originally posted here by unhappyStar_7
i doubt you have completly legitimate intentions in mind but truly i don't care so here goes...
I have had huge success cracking local box admin passwords with LophtCrack. It's a commercial product now, but essential. A previous poster already posted the process, I am just backing him up. We have standardized local administrator policies, but every once in a while you run into one that someone fat fingered or it may even be a rogue box. Out comes Lopht and in about 5 hours you have the password, assmuning it's an easy one. I had one take almost 20 hours but it was a slow machine and the password was huge.
I have also had to clean up a network in which the previous admin was fired and took all the passwords, if you find yourself in that postition it is very stressful and time consuming to find and document the network, this tool is definitly one that helps. As always physcial access to a machine is paramount. So keep those critical PCs locked up!
I have had a lot of success with the Winternals software for recovering and changing lost admin passwords. They offer a evaluation (which is fully functional) on their website.
Someone can probably clarify this, but Lopht Crack was developed by a hacking group called Lopht Heavy Industries. I think these guys decided to go legit and form Winternals. And started winternals.com. There current projects are, I believe, to be children of their old hacking tools.
I remember reading that back when they shifted the old web site to winternals.com??
Under most NTFS file systems the NT Password and Registry Editor Boot disk has been known to work. We use it on NT/2000 and it has never failed. I'm sharing this information in hopes it is used for good reasons only. Don't make me regret this. It can be found by doing a search on google.
window xp does not ask for a username it only ask for a password ..
If you have XP Pro you can turn on some better security, User Name and password, and if on a domain or active directory, domain credentials can be added.Quote:
window xp does not ask for a username it only ask for a password ..
That is untrue! Even without XPpro, let's say you log in using the welcome screen and there are several users. When you click on your name or one of the accounts, you are selecting a USERNAME and then (depending on how the account is configured) you might have to enter a password. The screen where you are asked to click on one of the accounts IS where XP asks for your username. RoadClosed is also correct, there are usernames in both XP home and pro, however, popeye's statement is totally wrong. I've seen login systems for XP where you actually have to type in your username and password before you're allowed access to the machine but I'm not exactly sure how it's done.Quote:
window xp does not ask for a username it only ask for a password ..
You can set up different profiles in XP home so that Mom and Dad can have seperate desktops from the kids. There are a lot of options for home, personally my XP home edition on my home PC doesn't ask for anything, and I think I chose that option when I upgraded using the wizard. I am not at home now so I can't remember the commands. I did get this from http://www.kellys-korner-xp.com/win_xp_logon.htm
"To open the User Accounts tool, open Control Panel from the Start menu, and then double click User Accounts.
To create a new user account, follow these steps:
1. Click "Create a new account" in the "Pick a task" list box.
2. Type the name that you want to use for the account, and then click Next.
3. Select the desired account type, and then click Create Account.
To make changes to an account, follow these steps:
1. Click "Change an account" in the "Pick a task" list box.
2. Click the account that you want to change.
3. Select the item that you would like to change:
- Click "Change the name" to change the name that appears on the Welcome screen for the account.
- Click "Change the picture" to change the picture that is used to represent the user account. You can use any image file on the computer for the user's picture.
- Click "Change the account type" to change the account type to increase or decrease the user's rights on the computer.
- Click "Create/change the password" to create or change the password for the user and create or change the password hint.
- Click "Delete the account" to delete the user account from the computer. When you delete the account, you are given the
option to save the user's files on the computer.
Note: You can not delete the account for a user that is currently logged on to the computer."
u can also use knoppix-std its free and u can download it at www.knoppix-std.org be for warned that it will take a big part of the day to dl the *.iso image even on a cable connection if u were refering to this program then pay no mind to this if u already hav it but if not then hav phun
o thats right sorry this is only for linux oops dont mind this then
This setting can be switched on and off in the user menu under 'Change the ways users log on and off'. Also I don't understand why anybody would buy a second hand computer with Windows XP preinstalled by some stranger. And why wasn't the hard drive formated before being sold on?? I don't know about you people but I would never buy a preinstalled computer.Quote:
I've seen login systems for XP where you actually have to type in your username and password before you're allowed access to the machine but I'm not exactly sure how it's done.
Ok, I don't wanna know what you do with the system, but if you have physical access to the system, you should not use knoppix/l0pht. This can take forever. First of all, a default install of Windows XP has a blank Administrator password, so if try to log in as Administrator first. Second, the tool to use is http://home.eunet.no/~pnordahl/ntpasswd/ which will allow you to reset any password you like.
Oh yeah, l0pht crack was bought by @stake, which was bought by symantec. They have nothing to do with Winternals/sysinternals.