Automatic Password recovery BootableCD OPHcrack, Pop it in,boot and just wait for password ,Vista,XP OK Options

[Ben_Mott]

Its not in the PE environment, but why not use Ophcrack Live CD, completely automatic - pop it in, boot and just wait for the password. I often use it on client machines where i forgot to ask for a password.
http://sourceforge.net/project/showfiles.p...ckage_id=167699
ckamila
the above was pointed out to me and it is really cool excellent software.
found my login password in XP in 5 Minutes not 5 days
Regards Ben


This post has been edited by Ben_Mott: Sep 24 2007, 01:07 PM

[Ben_Mott]

new Version is now Vista compatible

Ophcrack LiveCD 1.2.1 - 2007-08-02

The ophcrack LiveCD contains a small linux system (SLAX6), ophcrack for linux and rainbow tables for alphanumerical passwords.

The liveCD cracks passwords automatically, no installation necessary, no admin password necessary (as long as you can boot from CD).

Windows Vista SAM can also be cracked.

http://ophcrack.sourceforge.net/


regards ben

[bengt]

ophcrack-livecd-1.2.2.iso

[McStarfighter]

Hm, can anybody say me how to boot it with GRUB (the content, not directly the ISO)? I want to use it from my USB-HD but haven't found the informations about booting SLAX with GRUB (not GRUB4DOS).

Thx a lot.

[FM_81]

Syntax from GRUB and GRUB4DOS isn't different (or only a little bit in some special points)!
Inside der ISO you should find a menu.lst if it is GRUB-based.

Otherwise, if based on ISOLINUX, you should find a ISOLINUX.CFG; post it's contents, it should be easy to recreate a GRUB-menu from this.

MfG FM_81

[d4vr0s]

Try this:

CODE

title Ophcrack LiveCD Graphics mode (auto mode)
find --set-root /boot/vmlinuz
kernel /boot/vmlinuz vga=769 ramdisk_size=6666 root=/dev/ram0 rw autoexec=xconf;startx
initrd /boot/initrd.gz

title Ophcrack LiveCD Graphics mode (VESA mode)
find --set-root /boot/vmlinuz
kernel /boot/vmlinuz vga=769 ramdisk_size=6666 root=/dev/ram0 rw autoexec=startx
initrd /boot/initrd.gz

title Ophcrack LiveCD (if kernel hangs in other modes)
find --set-root /boot/vmlinuz
kernel /boot/vmlinuz vga=769 ramdisk_size=6666 root=/dev/ram0 acpi=off noagp nopcmcia noapm nousb rw autoexec=xconf;startx
initrd /boot/initrd.gz

title Dump hashes automatically in text mode
find --set-root /boot/vmlinuz
kernel /boot/vmlinuz vga=normal ramdisk_size=6666 root=/dev/ram0 rw autoexec=/root/dump_hash.sh
initrd /boot/initrd.gz

title Ophcrack LiveCD Text mode (to configure X manually)
find --set-root /boot/vmlinuz
kernel /boot/vmlinuz vga=normal ramdisk_size=6666 root=/dev/ram0 rw
initrd /boot/initrd.gz

This post has been edited by d4vr0s: Oct 10 2007, 06:24 PM

[ktp]

To complete, of course one must copy the directory /slax from the iso to the root of the USB key/HDD.

[ktp]

Could this utility (it resets the password only, not to find out the password) be faster?
Offline NT Password & Registry Editor
http://home.eunet.no/pnordahl/ntpasswd/

[Ben_Mott]

we already got SALA on UBCD4WIN (sophisticated Bart PE )which is really Cool !!!
and that guy Sala is very clever.
http://www.911cd.net/forums/index.php?showtopic=7137

http://www.kood.org/windows-password-renew-11/

but it just replaces password (cool very clever !!! )
but is not as much fun as OPHcrack
this one is Real cool. it is amazing !!!!!
better than dream pack PL

regards Ben


This post has been edited by Ben_Mott: Oct 11 2007, 03:10 AM

[Daemonforce]

Do you have any idea how long it's been since I've seen a reference to DreamPack?

I'm getting OPHcrack since this is the case...

[McStarfighter]

Thanks for the answers.

But I've got a question: Is the "set-root" parameter available in GRUB? In G4D I know it is possible, but in GRUB "himself"?!

[Rajes]

Hi All,

Sorry if i am digging up an old thread..

And I know that this is possibly a ophcrack issue.. but still, thought that i'd ask here also...

I am a newbie, and have just finished my first recovery cd (with XPE, KAV7, TrueImage11, Undelete Plus), am running it off a Transcent jetflash 16GB - FAT32, with grub4dos. (Took me 3 days to get all these right, with a lot of help from the posts in this forum). Now I am trying to to multiboot into ophcrack.

Instead of copying the files from the ophcrack live cd, I just copied the .iso file into my pendrive. (That way, i can also learn on how i can have multiple boot CD iso's in the pendrive). I am able to successfully boot into it using grub4dos "map" command, and get the liveCD initial menu (Graphic mode / Graphic Vesa mode / text mode). I tried all three options.. It boots, but then when it reaches the line

* looking for data directory (searching for livecd.sgn file)

it fails, with this message

Fatal error occured - ophcrack data not found
You are maybe using an unsupported boot device (eg. SCSI or old PCMCIA)
Workaround: copy the directory ophcrack from your boot device to an ISE/SATA
disk, eg. to /mnt/hda1/ophcrack or C:\ophcrack. Then try to boot again.

I am still working on this.. but any help will be greatly appreciated.

Thanks & Regards
Rajesh

[Rajes]

Hi All,

I tried with --mem option to map the .iso.. (Does an iso file has to be contiguous to be "map"ped in grub4dos? Or no such limitations? Copying to memoy takes a lot of time...), but still, same error.

When I extracted the ophcrack/ folder to flash disk, and booted from the iso same as before it worked fine. But if i removed the folder fom the iso (so that my iso is just 6MB instead of 400+ MB), it failed - iso file hash failure or something.

So, i just extracted the boot/ and ophcrack/ folders to my flashdisk and did away with the .iso option. Thanks d4vr0s, I just copied your script (in this thread) to submenu.lst . saved quite a bit of time. And it works fine.

Ready to rock.

Thanks & Regards
Rajesh

[jaclaz]

Just for the record:
http://diddy.boot-land.net/grub4dos/Grub4dos.htm
http://diddy.boot-land.net/grub4dos/files/map.htm

There are two distinct types of mapping, direct and memory. Direct mapping is generally used for larger images/devices. If using direct mapping to create a virtual device from a disk image, then the image file must be contiguous (not fragmented). Either of the following programs can be used to defragment a file that is contiguous - contig or wincontig. Attempting to directly map a non-contiguous file will result in Error 60: File for drive emulation must be in one contiguous disk area , in which case memory mapping or defragmenting the file, and then retrying, should be attempted.

Memory mapping, which copies the mapped device/image into memory, is generally used for smaller images - e.g. floppy disk images. In memory mapping the image file can be non-contiguous. Available system RAM will restrict the size of any image mapped to memory.

The "map" process is implemented using INT 13 - any disk emulation will remain accessible from an OS that uses compatible mode disk access, e.g. DOS and Windows 9x. The emulation can't however, be accessed from an OS which uses protected mode drivers (Windows NT/2000/XP/Vista, Linux, FreeBSD) once the protected mode kernel file(s) take control.

jaclaz

[Rajes]

Thank you very much Jaclaz,
IN my case, it is not the fragmentation (gave teh same result with mem load.. and 400+MB image is fine .. my puter has 2GB RAM). But i believe slax linux tht is on the ophcrack livecd can't access a "Mapped" drive.. But This information you provide is valuable for other boot cds. It's nice to have info from one point. Thank you.

[jaclaz]

But i believe slax linux tht is on the ophcrack livecd can't access a "Mapped" drive.

Yep, Slax:
http://www.boot-land.net/forums/index.php?showtopic=6816
is reported as not working.


Usually the inner (Linux) part of the Cd can be modified, see these:
http://www.boot-land.net/forums/index.php?showtopic=4902
http://www.boot-land.net/forums/index.php?showtopic=5041

and more generally browse/search the forum:
http://www.boot-land.net/forums/index.php?showforum=66

jaclaz