Go Back   Computer Forums > General Computing > Server Administration
Click Here to Login
Join Computer forums Today


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 10-20-2004, 01:36 AM   #1
Daemon Poster
 
CarpeNoctem's Avatar
 
Join Date: Oct 2004
Posts: 1,274
Send a message via AIM to CarpeNoctem Send a message via MSN to CarpeNoctem
Default Extracting the SAM file

Is there anyway I can extract the SAM file from my pc using knoppix? Other than using a USB thumbdrive? Or if you know another bootable cd linux distro that allows you to remove the disk and burn a cd?
__________________

__________________
How many people can read hex if only you and dead people can read hex?

Start using reputation points!!!
CarpeNoctem is offline   Reply With Quote
Old 10-20-2004, 04:59 PM   #2
In Runtime
 
Join Date: Sep 2004
Posts: 158
Send a message via ICQ to inimino Send a message via AIM to inimino
Default Re: Extracting the SAM file

What's a SAM file?

Just upload it somewhere on the Web, or to another computer on your LAN. Or send it to yourself in an email.
__________________

__________________
inimino is offline   Reply With Quote
Old 10-20-2004, 10:43 PM   #3
Daemon Poster
 
CarpeNoctem's Avatar
 
Join Date: Oct 2004
Posts: 1,274
Send a message via AIM to CarpeNoctem Send a message via MSN to CarpeNoctem
Default

the SAM file is the file that the administrative passwords are stored in. You can copy it to a USB thumbdrive using a bootable linux distro with a program that can view the NTFS partition
__________________
How many people can read hex if only you and dead people can read hex?

Start using reputation points!!!
CarpeNoctem is offline   Reply With Quote
Old 10-21-2004, 12:19 AM   #4
In Runtime
 
Join Date: Sep 2004
Posts: 158
Send a message via ICQ to inimino Send a message via AIM to inimino
Default Re: Extracting the SAM file

I see. I'm not too familiar with Windows

In that case I would guess it's just a few kilobytes, so my suggestion should work fine, if you have webmail, the easiest thing is just bring up a browser on KNOPPIX and email it to yourself, otherwise use FTP or similar to upload it on the Web somewhere.
__________________
inimino is offline   Reply With Quote
Old 11-05-2004, 09:52 PM   #5
In Runtime
 
Join Date: May 2004
Posts: 233
Default

So this file has passwords in it that are in plain text?
__________________
Mitchell is offline   Reply With Quote
Old 11-05-2004, 10:40 PM   #6
In Runtime
 
Join Date: Sep 2004
Posts: 158
Send a message via ICQ to inimino Send a message via AIM to inimino
Default Re: Extracting the SAM file

Apparently they are MD4-hashed and then encrypted using DES.
__________________
inimino is offline   Reply With Quote
Old 11-06-2004, 07:01 AM   #7
In Runtime
 
Join Date: May 2004
Posts: 233
Default

Then why would you want to get this file because you would not be able to read it any way?
__________________
Mitchell is offline   Reply With Quote
Old 11-06-2004, 05:04 PM   #8
In Runtime
 
Join Date: Sep 2004
Posts: 158
Send a message via ICQ to inimino Send a message via AIM to inimino
Default Re: Extracting the SAM file

Because you can crack it, naturally.
__________________
inimino is offline   Reply With Quote
Old 11-06-2004, 08:13 PM   #9
Fully Optimized
 
rakedog's Avatar
 
Join Date: May 2004
Posts: 2,718
Send a message via AIM to rakedog
Default Re: Extracting the SAM file

Quote:
So this file has passwords in it that are in plain text?
Hahahaha, no even microsoft isn't That stupid.



Quote:
Then why would you want to get this file because you would not be able to read it any way?
You can use cain and abel, or john the ripper to crack the hashes. Naturally, the SAM file is one of the most important cracking aspects of windows.

Quote:
Is there anyway I can extract the SAM file from my pc using knoppix?
Yeah, i believe knoppix has a tool to copy the contents of the SAM, but I can't remember the tool of the top of my head.
__________________
hackthissite.org (criticalsecurity.net) | gentoo.org

The best argument against evolution are creationists themselves. They prove that life is devolving rather than evolving.
rakedog is offline   Reply With Quote
Old 11-06-2004, 09:40 PM   #10
In Runtime
 
Join Date: May 2004
Posts: 233
Default

OK I never new that a file like that existed. Now I do.
__________________
Mitchell is offline   Reply With Quote
Old 11-06-2004, 10:58 PM   #11
Daemon Poster
 
CarpeNoctem's Avatar
 
Join Date: Oct 2004
Posts: 1,274
Send a message via AIM to CarpeNoctem Send a message via MSN to CarpeNoctem
Default Re: Extracting the SAM file

You can copy it just like a regular file through the shell. But my problem is that you cant eject the cd and still use knoppix. And I can't afford a USB thumbdrive.

The SAM file is larger than a floppy disks.

So if anyone knows of any bootable OS's that can allow you to remove the cd and burn that would be great.
__________________
How many people can read hex if only you and dead people can read hex?

Start using reputation points!!!
CarpeNoctem is offline   Reply With Quote
Old 11-07-2004, 01:27 AM   #12
In Runtime
 
Join Date: Sep 2004
Posts: 158
Send a message via ICQ to inimino Send a message via AIM to inimino
Default Re: Extracting the SAM file

How big is it? Why can't you use my suggestion and just email it to yourself?

It's not likely you'd be able to burn a CD while running a CD-based distro. It's not theoretically impossible, but it's difficult enough and mostly-useless enough that I don't think anyone has tried it.
__________________
inimino is offline   Reply With Quote
Old 11-07-2004, 01:32 AM   #13
Daemon Poster
 
CarpeNoctem's Avatar
 
Join Date: Oct 2004
Posts: 1,274
Send a message via AIM to CarpeNoctem Send a message via MSN to CarpeNoctem
Default Re: Extracting the SAM file

I tried emailing it to myelf. When I tried uploading it, the browser only let me upload files that were on the disk. Not the HD.
__________________
How many people can read hex if only you and dead people can read hex?

Start using reputation points!!!
CarpeNoctem is offline   Reply With Quote
Old 11-07-2004, 01:39 AM   #14
In Runtime
 
Join Date: Sep 2004
Posts: 158
Send a message via ICQ to inimino Send a message via AIM to inimino
Default Re: Extracting the SAM file

That's odd. In any case, you should be able to simply copy it onto your desktop and upload from there.
__________________
inimino is offline   Reply With Quote
Old 11-07-2004, 07:26 AM   #15
In Runtime
 
Join Date: May 2004
Posts: 233
Default

Why not just connect another CD drive?

I am not sure if you can do this but you could maybe make a RAM Drive and then run the Bootable OS off of the RAM drive. I think that would be pritty hard though because your RAM clears each time you restart the computer.
__________________
Mitchell is offline   Reply With Quote
Old 11-07-2004, 09:52 AM   #16
Fully Optimized
 
rakedog's Avatar
 
Join Date: May 2004
Posts: 2,718
Send a message via AIM to rakedog
Default Re: Extracting the SAM file

What you do is launch knoppix, and there is a program on it, i'll find it out in a bit, you launch it and you overwrite ones of the hashes with your password. Now you go onto the windows partition, and go into the account you changed. Now you extract the SAM.

BTW, in case you're wondering why you can't just leave off with the account that you have your own password to now, that's because you won't be able to get any files that have been encrypted with windows unless you get the original password.
__________________
hackthissite.org (criticalsecurity.net) | gentoo.org

The best argument against evolution are creationists themselves. They prove that life is devolving rather than evolving.
rakedog is offline   Reply With Quote
Old 11-07-2004, 10:00 AM   #17
Fully Optimized
 
rakedog's Avatar
 
Join Date: May 2004
Posts: 2,718
Send a message via AIM to rakedog
Default Re: Extracting the SAM file

update: Done some research, friend of mine says the program on knoppix is called chntpw .
__________________
hackthissite.org (criticalsecurity.net) | gentoo.org

The best argument against evolution are creationists themselves. They prove that life is devolving rather than evolving.
rakedog is offline   Reply With Quote
Old 11-07-2004, 08:20 PM   #18
Daemon Poster
 
CarpeNoctem's Avatar
 
Join Date: Oct 2004
Posts: 1,274
Send a message via AIM to CarpeNoctem Send a message via MSN to CarpeNoctem
Default Re: Extracting the SAM file

thx for the info rakedog, we will see if it works out fine.
__________________
How many people can read hex if only you and dead people can read hex?

Start using reputation points!!!
CarpeNoctem is offline   Reply With Quote
Old 12-17-2004, 11:55 PM   #19
Beta Member
 
mastertork's Avatar
 
Join Date: Dec 2004
Posts: 2
Default SAM Inside

When / If you extract the sam file make sure you get the system file to. It is in the same dir. Then use SAM Inside to crack it almost garunteed. I have tried cain and able before and SAM Inside did what Cain couldn't
__________________
mastertork is offline   Reply With Quote
Old 01-01-2005, 01:23 AM   #20
Beta Member
 
Join Date: Jan 2005
Posts: 4
Lightbulb god ppl its not that hard!

guys its not hard thers only bin one guy who noes what to do on this message board. use jack the ripper to crack the sam fiule and to get teh hashes all u need to do is go to

http://home.eunet.no/~pnordahl/ntpasswd/

and download the bootable disk onto a floppy then u take this floppy put it in ur floppy drive if u guys noe what that is and u start up ur comp u all should no this and if u dont dont bohter leaving stupid messages!
__________________

__________________
almost_there is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off



All times are GMT -5. The time now is 07:26 PM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2020, vBulletin Solutions, Inc.
Search Engine Friendly URLs by vBSEO 3.6.0
×