Vlixter

TUTORIAL - How to hack the administrator password in Windows XP!

Have you ever wondered how to retrieve the Windows admin password for a computer? I’ll try to be brief and explain how to do just that without using too many advanced techniques. Of course they are many ways of doing this, so I’ll outline what I find easy. Remember that this is only for educational purposes, don’t try to hack someone’s computer (unless you really need to…). Also remember that you need physical access to the computer and some time. This tutorial is for Windows XP, not sure what else it will work for.

Tools you will need:

• 1GB or bigger USB key (or a CD and CD burner)
• Another any size USB key
• Any distribution of Linux. I used Pendrive Linux and a USB key but any combination will work.
• A computer on which to do all the installing and other work
• The computer for which you want to retrieve the password
• Rainbow table program Ophcrack
• A 700MB rainbow table (if the password is more complex you can use a bigger one. More on that a bit later)

I will write this tutorial as if you are using Pendrive Linux and USB, but you can easily port this method to CD/DVD or other variants. Below is the step by step tutorial on what exactly you need to do.

• Format your USB stick and set the filesystem to FAT32 while formattting. If the Linux won’t work with FAT32 try FAT.
• Download Pendrive Linux from HERE
• Using Winrar or another extraction program, extract the contents of Pendrive Linux into the root of your newly formatted USB drive
• When it finishes extracting, open the USB directory, and open the file makeboot.dat. This will make your USB drive bootable
• Your USB is ready for booting. Plug it into the computer you want to find the password for. Reboot/Start the computer
• When booting, make sure you select USB as the boot device. This is different for every BIOS, so you will just have to figure it out yourself. It’s sometimes F9, F8, or Del key, but it could by something else
• Wait for Pendrive linux to finish booting. You will arrive at the main screen.
• Open the window that allows you to see all storage devices on the computer. One of the them will be the hard drive, open it and navigate to C:\Windows\system32\config/
• Stick your other USB key into the computer, and copy all the files from this directory onto another directoy on your USB key. You can ignore the systemprofile directory, you don’t need it.
• Just to be safe and make sure you have the files you need, you can also copy the contents of C:\Windows\repair to another folder on your USB Key. This is just in case the other files don’t work, but most likely they will.

OK, you are now finished with copying the system files. What’s stored in the /config/ directory is all the passwords that are saved on the current computer, but they are encrypted, so we need a way of decrypting them. It would take forever to bruteforce, so what we will use is Rainbow Tables. These are pregenerated hashes, so what the computer will do is check the hashed version of the password from the file and compare it with the table. Of course, the bigger the table the more possibilities it has, and also it’s faster. Now it’s password-cracking time

• Download Ophcrack. It will allow us to crack the passwords.
• Download this 700MB rainbow table
• If the password is not alpha-numeric and contains special characters, you will need a bigger table. What I recommend is to download a 35 GB rainbow table from a torrent. The torrent is available from HERE. Make sure you download the right now, or otherwise that’s a lot of bandwidth wasted!
• Open up Opcrack and click the Tables icon. Point to your tables directory and click Install
• Click the Load icon, and select “Encrypted SAM”. Now point the tree view to the directory to which you dumped all the files from the system32\config directory
• Click crack and wait a little. If the passwords are complicated it might take longer. After it finishes, it presents you with all the passwords stored for this computer!

If it didn’t work, it might be because you are using the alphanumeric table and the password has non alphanumeric characters. If you Download the 35 GB table there is a much higher chance you will be able to crack the password! Also, it might be possible that the passwords are salted, in which I think you are out of luck, since a salt makes it really hard to decrypt the hash. Still, try the method and see what you come up with! You now have administrator access to the machine! I hope you enjoyed reading, and that you learned something. Also, remember that this is for educational purposes only, don’t use it for criminal activities! Also, sorry for no pics, maybe I”ll come up with some a bit later!

Tags: hack, tutorial, windows

Flying RC Penis!

Looks like someone got really crafty and managed to build a remote control flying penis! The video embedded below has to be one of the funniest scenes I’ve ever seen. What would you do if you saw a flying RC penis?

New monitor obtained - Samsung SyncMaster 245B

I have just received my new Samsung SyncMaster 245B along with another Seagate Barracuda 7200.11 500GB to complement my 750GB version. This new monitor has a max native resolution of 1920×1200 giving me tons of desktop space. Some pictures are below.

I am a bit skeptical as to the other 2 monitors, since I don’t think I really need three, and 2 would probably be enough. For my graphics adapter, I have 2 x evga 7800 GTX KO, which gives me a total of 4 DVI ports, so you would think that having 3 monitors is not a problem. Well, its not, until you come to the conclusion that you want each monitor to be a separate entity, meaning a separate background and icons, because now, my 20″ and 17″ are acting as one big display, and maximizing any window inside these monitors makes the window span across both monitors, making it pretty annoying. I am using the latest Nvidia drivers, and my only options are: single display, clone, extend horizontally and extend vertically. Why is there no option to make them 2 sepearate monitors? That would really be useful and I don’t see why the graphics card is not able to do that. Also, I’m using a program called UltraMon to manage my displays, but I can’t figure out how to split the monitors. Please, if any of you have any ideas on how to solve this, leave a comment. Thanks a lot. Now some images.

Tags: monitor, samsung

Seagate Barracuda 7200.11 750GB Hard Drive Received

YAY, I just received my new shiny Seagate Barracuda 7200.11 750GB Hard Drive. I ordered it from overclockers.co.uk, and I was kind of scared because I read a lot of reviews online saying that overclockers are uber-crap. But whatever, I decided to order to test it out. I ordered 29th March, paying with credit card online in their shop. I pay, and then I see the order of my status as “Security Verification”. Ok, security verification, fine…. I check the next day and still security verification, WTF? I send them an email (on Monday) and they reply in a couple of hours saying that my hard drive is ready for shipping tomorrow. So I’m asking myself, “tomorrow?”. But, its Monday, why can’t you just send it on Monday, its the first day of the week, so again, WTF. The other part is that overclockers had a service to pick the date of delivery, so I picked Thursday, and surprise surprise, it came today, on Friday. This is international shipping, but still, they should compensate for the delays in their online form. I’m attaching some pictures of the unpacking. As of now, the drive is still formatting, and is at 23%.

Also, I will soon write an article about my previous hard drive that I ordered and had to send back, it was a Samsung 750GB F1.

Tags: harddrive, HDD, seagate

Rearranged computer setup

Hello all. I just rearranged my computer desk so that everything is nice and dandy for the arrival of my new 24″ Samsung monitor. Here are some pics.

Tags: Computers, Technology

New monitor - Samsung 245B

Hey!!

I have just ordered myself a new monitor, the Samsung 245B.

This will be an addition to 2 other monitors I already have, the 204B and the 172B. I have been overall very happy with the quality of Samsung monitors, the 172B, I have had for about 7 years now and its still working great as an MSN screen :).

Keep tuned for when I receive my new 24 inch monitor, I’ll try to write a short review then.

Tags: 245B, monitor, samsung

Pirate Bay.org - Torrent Tracker

This article talks about “The Pirate Bay”, a large Swedish torrent tracker, and about the supposed problems it brings to the phonographic industry. The site was already shut down once, but only for 3 days, as national protests emerged saying that the United States forced the Swedish parliament to undertake action against the activities of “The Pirate Bay”, which were and still are legal under the current Swedish law.

The information system here is the networked servers of “The Pirate Bay” and the complex programming structure that makes it tick. A user that wants to download the newest television show episode will go their website, and input their query which will result in the site indexing all the torrent files it could find, along with vital info such as seed/leech ratio. The programmer in The Pirate Bay team is as of now coding a new and improved p2p program that would enhance the security of the users using it. Also, “The Pirate Bay’s” servers don’t actually host any content; they merely index it, which as of now is legal in Sweden.
The main ethical issue that The Pirate Bay brings up is intellectual property, as the files that this tracker indexes are mostly programs, music and films which are all copyrighted. A representative of the phonographic industry is arguing that if people download music for free, it reduces the revenue, which leads to the companies not being able to pay the artists, which sounds rather like a joke. Founders of The Pirate Bay are arguing that they still go to cinema, they still go to concerts, and they tell their friends to, so in fact they are contributing to the profits of the music industry. They also say that when technology advances, the process can’t be reverted and that the industry just has to accept downloadable music as a reality. The Pirate Bay team brings up a great comparison - “Nobody is crying that people who used to go around selling ice to people do not have a job anymore because of the fridge”. They are also saying that if, by any chance, the Swedish law changes and makes it illegal to host a torrent indexer, they’ll just move to another country that doesn’t have a problem with it.

The area of impact of The Pirate Bay is most definitely Arts, Entertainment and Leisure, as it allows people to download gigabytes of copyrighted music/video content which both serve entertainment purposes. One of the stakeholders, the phonographic industry, explains that this kind of activity totally destroys the Entertainment industry, while the users, also stakeholders, don’t give a damn and download what they want; a number is quoted that 1-2 million people in Sweden download content using torrents. The government is as of now not doing anything as they think there is no plausible solution, and The Pirate Bay team is enjoying themselves from the money they get from the on-site advertisements.

Original Article: http://news.bbc.co.uk/2/hi/programmes/click_online/7120845.stm

Tags: piratebay, torrents

Should Schools Fingerprint Your Kids?

Original Link - http://www.time.com/time/business/article/0,8599,1665119,00.html

Schools in certain states in America want to introduce fingerprint scanners in cafeterias to increase the lunch period. Using a 6 digit number was troublesome for a lot, and it shortened the lunch break which in some schools is only 20 minutes long. The schools’ idea is that by using a fingerprint scanner lines would move more quickly and the students could enjoy a longer lunch break.

The information system here is biometric devices and their use. At the beginning of the year, all the children would have their fingerprints scanned and put into the school system. Then, when in a lunch line, what a child would have to do is just put their index finger on a small biometric reader. The picture of the person and other personal data would be pulled from the school server and would pop up on the cashier’s screen.

This development raises the ethical issue of privacy. Even though schools have a legal binding with the government that they can’t release any personal data, a lot of parents are infuriated by this new idea. One of them commented it as being Orwellian, and that he believes that this data might be compromised by 3rd parties. While the schools believe that this would be a great improvement, parents are scared about their children and no one should blame them. No one would want the personal data of their children seen by people who were never meant to see it.

A possible area of impact of this is the education system along with the children in it. If the system is not implemented, the children will have to stand more time in a line, have less free time during lunch which could possibly demoralize them for the next class. The impact on the school would be such that everything would be much more simplified, and no one would have to go through the trouble if they forgot their student ID. They would have their fingerprint with them for payment. Other stakeholders apart from the children and schools include the parents who are terribly nervous about their children’s privacy, and the biometrics companies, for which schools are slowly becoming good customer of.

Tags: , fingerprint, school