Vulnerability Development: RE: SAM encrypted with syskey

["Anzaldo, Oscar" <Oscar.Anzaldo () xerox com>]

Thank to all for your answers.

To avoid misunderstandings what i am looking for is the password for the
SAM not the users/passwords.

Best regards

-----Original Message-----
From: Johnson, Joey [mailto:Joey.Johnson () MWAA com] 
Sent: Jueves, 10 de Febrero de 2005 01:23 p.m.
To: Anzaldo, Oscar; vuln-dev () securityfocus com
Subject: RE: SAM encrypted with syskey

You have lots of options with Windows. 
Easiest solution- Get a copy of ERD and just change the password

-----Original Message-----
From: Anzaldo, Oscar [mailto:Oscar.Anzaldo () xerox com]
Sent: Tuesday, February 08, 2005 10:50 AM
To: vuln-dev () securityfocus com
Subject: SAM encrypted with syskey

 Hi list,

Does any one knows a method to retrieve the password for the SAM
(NT/W2K) that has been encripted with syskey? Or bypass the system
startup password?

Regards

Oscar.