Custom Search

Saturday, February 7, 2009

Breaking Windows 2000/2003/XP/Vista Administrator Password

Going by my word posting here about a simple tool which will break Windows 2000/XP/2003’s Administrator account’s password.

Before starting, for newbies…

Windows NT 5.0 = Windows 2000 (all edition)
Windows NT 5.1 = Windows XP (all edition)
Windows NT 5.2 = Windows 2003 (all edition)

So throughout this post I will refer our target as Windows NT 5.x (as following content are equally applicable to all Windows NT 5.x OS family).

So lets start the fun…
You will be surprised to know that you can break into any Windows NT 5.x system without any software tool 80% of the time! For rest you need a software like below!

First lets get to 80% of the vulnerable system….

In Windows NT 5.x, you can create any no. of user with different names, privileges and optionally password.
One such account with highest privilege level, with user name “Administrator” is setup by default.

At the time of installation Windows NT 5.x prompts for password but many systems are setup by vendors and other person. The end-user of this system is different than one who installed it. These lazy people are always in hurry and often left this password as blank.

The irony comes next. In final step of installation you create an account with mostly your first name. Lock it with password(optionally) and start using the system. Now on welcome screen you see account(s) with different name. But have you never see this default “administrator” account unless you boot in “safe mode”.

Now if you can’t see “administrator” account on screen (as with Windows XP login default screen), just press  “CTRL+ALT+DEL” and it will change login “screen” to login “box” where you can type “administrator” as user name! This is what works 80% of the time.

Now for rest of the 20% system…. 
There are literally more than 100’s of tool available on Internet and the tool I use is a small Live-CD named ntpasswd . I got it from my hacker friend Surun.
Burn this ISO on a CD. Its bootable image of approx 2.7 MB.

It has Linux OS with text-mode only. No Linux Knowledge Require here to use this disk. ;-)

After booting from CD. A menu driven program will start with options and their description at each level.
READ EVERYTHING BEFORE GOING AHEAD as one mistake may make the target machine unusable.

One mistake may crash the system to the reinstallation phase! So test it first on systems from college, office, etc! ;-)

It worked 100% of the time….
As its 3.03 MB (after extracting) you can burn it on a mini-CD and keep it in your wallet all the time, so can roam around having master key to all systems having Windows NT 5.x family OS!

No comments: