UGN Security Forums
My ProfileMember DirectoryLogin
Search our ForumsView our FAQView our Site Rules
View our CalendarView our Active TopicsGo to our Main Page

UGN Security Store
 

Network Sites UGN Security, The GoNix Initiative, Elite Web Gamers, Back of the Web, EveryDay Helper, VNC Web Design & Development
September
Su M Tu W Th F Sa
1 2 3 4 5 6
7 8 9 10 11 12 13
14 15 16 17 18 19 20
21 22 23 24 25 26 27
28 29 30
Sponsored Links
Latest Postings
The History Thread...
by Gremelin
Today at 09:42 AM
Doom 3
by Cyrez
09/11/14 08:58 PM
Amazon Gift Card Generator/KeyGen?te
by Gecko666
08/22/14 09:21 AM
Latest Reviews
Topic Options
Rate This Topic
#15355 - 08/15/02 07:02 AM win XP administrator
paleothol Offline
Junior Member

Registered: 08/15/02
Posts: 4
Loc: England
I am a bit of a newbie to hacking and my dad recently put an account on my computer and made himself system administrator so i can't do much on my account. I was wondering if anyone knew how to take that off and make me system administrator?

Top
Sponsored Links
      
#15356 - 08/15/02 08:43 AM Re: win XP administrator
wizzy Offline
The other other white meat

Registered: 03/02/02
Posts: 96
Loc: Iowa
does he have his account password protected? if not just log on his name and change your account to an admin too. if he has a password on it, download a keylogger and get his password from that, than log on and change your account.
_________________________
Gizmo: Wizzy is SeXor
Gizmo: Wizzy is the other half of my Gizzy

Top
#15357 - 08/15/02 09:44 AM Re: win XP administrator
paleothol Offline
Junior Member

Registered: 08/15/02
Posts: 4
Loc: England
i can't install the keylogger because only the system administrator can install things. And yes he does have a password!

Top
#15358 - 08/15/02 10:01 AM Re: win XP administrator
Infinite Offline



Registered: 03/09/02
Posts: 1041
Loc: Canada eh
There's a file in the %systemroot%\WINDOWS\system32\config folder called SAM. This is the file that contains all the users and passes for the machine (or network, depending). It's being run by the SYSTEM so you can't access it directly. There's a prog out there called PWDUMP2 (i think) that will extract the passes out of that file for you to abuse at your leisure. You're gonna need a pass cracker though cause they are encrypted. However, there *MAY* be a copy of the SAM file in the %systemroot%\WINDOWS\repair folder that is not in use. If I remember right, this backup is made during install, so unless your Dad created his acount while Windows was being installed the backup will only have the default account and passwords in it.

sum

Top
#15359 - 08/15/02 10:35 AM Re: win XP administrator
paleothol Offline
Junior Member

Registered: 08/15/02
Posts: 4
Loc: England
i downloaded that program, ran it but i don't know where the password file is located if there is one and i've tried searching for passwd.txt and no results came up! Any suggestions?

Top
#15360 - 08/15/02 10:42 AM Re: win XP administrator
Infinite Offline



Registered: 03/09/02
Posts: 1041
Loc: Canada eh
Quote:
There's a file in the %systemroot%\WINDOWS\system32\config folder called SAM
Dude, I told ya where to find it. %systemroot% is a way of saying 'whatever drive your windows dir is on', usually the C:\ drive. Go look in there and/or where I said the backup copy was/is. As well read the instructions for that program, just running things blindly will get you absolutely nowhere.

sum

Top
#15361 - 08/15/02 10:50 AM Re: win XP administrator
Infinite Offline



Registered: 03/09/02
Posts: 1041
Loc: Canada eh
Here, READ THIS FROM TOP TO BOTTOM!!!

PWDUMP2 README

Those are the exact instructions to do what you want. READ IT. And after you read it, READ IT AGAIN to make sure you understand it. If you still don't understand it after that then you shouldn't be messing with this shit.

sum

Top
#15362 - 08/15/02 10:51 AM Re: win XP administrator
paleothol Offline
Junior Member

Registered: 08/15/02
Posts: 4
Loc: England
i have put the files pwdump2.exe and samdump.dll in C:\WINDOWS\SYSTEM32\config where SAM is located and i ran the file! Now what?

Top
#15363 - 08/16/02 11:36 AM Re: win XP administrator
Mornse Offline
Member

Registered: 03/03/02
Posts: 185
Loc: Vancouver
A way that may be easier that I did once when I forgot the admin pass on my NT box (heh, yeah, shutup), was to boot to a floppy, you'll need to use NTFSDOS if your drive is using NTFS, otherwise just boot to a floppy and copy the SAM file to the floppy because the system won't be using it when you are running from the floppy. Then crack the file using LC3 from http://www.l0pht.com (that's a zero)
_________________________
Cha want some w***up?

http://www.dopeskill.com

Top
#15364 - 08/16/02 12:17 PM Re: win XP administrator
psychogen Offline
Member

Registered: 03/02/02
Posts: 257
Loc: UK
shit u guys, this guy is NEW remember!

I mean pwdump is not a bad choice, but l0pht is not good to him since he cant install shit and l0pht is distributed in a commercial installation format.

I suggest booting to safe mode, usually that should not ask you for any pwd, and create a new user. if that dont work return to pwdump.

Also try booting to safe mode without networking that should defiantely do it.
_________________________
The use of "hacker" to mean "security breaker" is a confusion on the part of the mass media. We hackers refuse to recognize that meaning, and continue using the word to mean, "Someone who loves to program and enjoys being clever about it."
--------------------
"Its not a bug, its a feature" (Epic Games)

Top
#15365 - 08/17/02 12:14 PM Re: win XP administrator
Infinite Offline



Registered: 03/09/02
Posts: 1041
Loc: Canada eh
Well it looks like I need to take a little of my own advice. After glancing through the readme file myself I noticed something I have overlooked.

Quote:
You need the SeDebugPrivilege for it to work. By default, only Administrators have this right, so this program does not compromise NT security.
So it would appear that this won't help you at all paleothol.

/me tries to remove foot from mouth and swallow his pride in one motion

So, paleothol, I guess I should apologize for being short with you when the info I was giving you wouldn't even help you anyways.

Sorry paleothol.

sum

Top
#15366 - 10/12/02 10:58 PM Re: win XP administrator
Satori Offline
Junior Member

Registered: 10/12/02
Posts: 10
Loc: San Antonio, Texas
No fear, paleothol. What you need is a handy Linux bootdisk with a handy binary on it that will do the hard work for you. The one I'm about to point you to will enumerate the user accounts and let you modify their passwords. What I'd recomend that you do is set a new password for the Administrator account, login as such and add your user account to the Administrator group, and then log in as you. Make sure that you log in and out again as yourself so that your dad doesn't boot up to find the Administrator account as last logon!

Keep in mind, this assumes that he is using an account with Admin privs, but that isn't Administrator. If you change HIS password, he's obviously gonna know about it.

Anyway, this tool actually works with SYSKEY encryption now - pretty handy. Select the "reset NT Password" from the list of bootdisks. Enjoy!

Top

Featured Member
Registered: 03/02/02
Posts: 136
Forum Stats
2148 Members
46 Forums
34460 Topics
69630 Posts

Max Online: 1567 @ 04/25/10 02:20 AM
Top Posters
UGN Security 27622
Gremelin 7193
§intå× 3255
SilentRage 1273
Ice 1146
pergesu 1136
Infinite 1041
jonconley 955
Girlie 908
unreal 860
Newest Members
Tim050, Gecko666, defghi795767, Devo60, ali
2148 Registered Users
Who's Online
1 registered (Gremelin), 347 Guests and 378 Spiders online.
Key: Admin, Global Mod, Mod
Latest News


Donate
  Get Firefox!
Get FireFox!