Ambush! - The Online Geek Community

Computer Related => Security => Topic started by: Boomslang on October 10, 2006, 09:42:30 AM

Title: How about this for lack of OS security?
Post by: Boomslang on October 10, 2006, 09:42:30 AM

How about this for lack of os security
http://home.eunet.no/~pnordahl/ntpasswd/bootdisk.html

This one is free I found one program they wanted $200


Yes it does work I used it on a server I got for free to get into the system :jawdrop:

[Edited on 10-10-2006 by Boomslang]

Title: How about this for lack of OS security?
Post by: ZWarrior on October 10, 2006, 12:43:08 PM

Why is that an OS vulnerablility?  You are not booting the OS, you are booting from a seperate disk.  That would be a physical plant security issue.  You can do the same thing with *nix or any other OS.

Title: How about this for lack of OS security?
Post by: Boomslang on October 10, 2006, 04:35:47 PM

You change the passwords with this progam not even the admin could log in

[Edited on 10-11-2006 by Boomslang]

Title: How about this for lack of OS security?
Post by: opiesilver on October 11, 2006, 03:31:13 AM

You can boot to safe mode dos shell rename a couple files and restart the computer thereby bypassing any security and then setting whatever password you want on the system.

Title: How about this for lack of OS security?
Post by: Boomslang on October 11, 2006, 07:55:06 AM

I read where passwords are not kept in files they are encrypted in the registry in Win2000 and XP. But I do see what you are saying.

Title: How about this for lack of OS security?
Post by: ZWarrior on October 11, 2006, 09:04:54 AM

Actually, they are not kept in the Registry, but rather in a separate file of their own.  Otherwise you would be able to hack it very easily with just RegEdit or Regedt32.

Title: How about this for lack of OS security?
Post by: Boomslang on October 12, 2006, 08:19:44 AM

winnt/system32/config  file?

Title: How about this for lack of OS security?
Post by: ZWarrior on October 30, 2006, 07:43:06 AM

actually, %SYSTEMROOT%\system32\Config\SAM is the filename.