Tài liệu này là cho những người muốn tìm hiểu làm thế nào và tại sao bẻ mật khẩu. Có rất nhiều thông tin được trình bày và bạn nên đọc tất cả trước khi bạn cố gắng làm bất cứ điều gì tài liệu ở đây. Tôi làm hết sức mình để cung cấp hướng dẫn từng bước cùng với những lý do để làm việc đó theo cách này. Lần khác, tôi sẽ chỉ đến một trang web cụ thể mà bạn tìm thấy những thông tin | Cracking Passwords Version file D password10. html Cracking Passwords Version by J. Dravet February 15 2010 Abstract This document is for people who want to learn to the how and why of password cracking. There is a lot of information being presented and you should READ IT ALL BEFORE you attempted doing anything documented here. I do my best to provide step by step instructions along with the reasons for doing it this way. Other times I will point to a particular website where you find the information. In those cases someone else has done what I attempting and did a good or great job and I did not want to steal their hard work. These instructions have several excerpts from a combination of posts from pureh@te granger53 irongeek PrairieFire RaginRob stasik and Solar Designer. I would also like to thank each of them and others for the help they have provided me on the BackTrack forum. I will cover both getting the SAM from inside windows and from the BackTrack CD DVD or USB flash drive. The SAM is the Security Accounts Manager database where local usernames and passwords are stored. For legal purposes I am using my own system for this article. The first step is to get a copy of pwdump. You can choose one from http wiki Pwdump. Update I used to use pwdump7 to dump my passwords however I have come across a new utility called fgdump from http fizzgig fgdump This new utility will dump passwords from clients and Active Directory Windows 2000 and 2003 for sure not sure about Windows 2008 where pwdump7 only dumps client passwords. I have included a sample that has simple passwords and should be cracked very easily. NOTE Some anti-virus software packages flag pwdump and fgdump as trojan horse programs or some other unwanted program. If necessary you can add an exclusion for fgdump and or pwdump to your anti-virus package so it won t flag them. However it is better for the community if you contact your anti-virus vendor and ask
