Vulnerability Development: RE: SAM encrypted with syskey

From: Anzaldo, Oscar <Oscar.Anzaldo_at_xerox.com>
Date: Thu, 10 Feb 2005 13:39:33 -0600

Thank to all for your answers.

To avoid misunderstandings what i am looking for is the password for the
SAM not the users/passwords.

Best regards

-----Original Message-----
From: Johnson, Joey [mailto:Joey.Johnson_at_MWAA.com]
Sent: Jueves, 10 de Febrero de 2005 01:23 p.m.
To: Anzaldo, Oscar; vuln-dev_at_securityfocus.com
Subject: RE: SAM encrypted with syskey

You have lots of options with Windows.
Easiest solution- Get a copy of ERD and just change the password

-----Original Message-----
From: Anzaldo, Oscar [mailto:Oscar.Anzaldo_at_xerox.com]
Sent: Tuesday, February 08, 2005 10:50 AM
To: vuln-dev_at_securityfocus.com
Subject: SAM encrypted with syskey

Hi list,

Does any one knows a method to retrieve the password for the SAM
(NT/W2K) that has been encripted with syskey? Or bypass the system
startup password?

Regards

Oscar.
Received on Feb 11 2005