Securing & Cracking Windows Password.

Now the first thing to crack or secure the windows password we first need to know about some stuffs.

Windows have something which stores our password.

So let’s know about that file…

And that file is SAM file. The path to the SAM is 

C:/Windows/System32/config/SAM

And here that SAM file.

But the problem is we can’t do anything with this file. Neither we can delete nor we can replace with another file and we also can’t edit so what to do.

If we try anything like replacing, deleting or editing we’ll get an error saying that the file is opened in system right now.

Now we have a choice either we ask the password or we boot in another OS and delete that file.

So now let’s boot to the another system. Here comes kali linux in picture. Now the question arises why we chosen kali linux we can also choose windows or mac.

But the best thing is kali linux is only OS can be operational without getting install it, and that’s an advantage for us.

So now let’s come to the cracking process.

Step 1 - Shut down the windows.

Step 2 - Plug in the bootable pendrive having kali linux or insert a burned cd having kali linux inside it.

Step 3 - Now boot into kali live without installing it.

Step 4 - After booting open the C: / drive or which contains the victims OS.

Step 5 - Browse for SAM file.

Step 6 - Now we can edit it or delete it or replace it.

Step 7 - I prefer to replace it with universal SAM file. It can be download through internet.

Step 8 - Now after restarting the computer with windows OS we could find that it doesn’t ask for the password.

Step 9 - BINGO!!!! Password cracked……..

Now there is one thing how to secure pc if it could be easily hacked. Now there is one thing i.e. syskey inbuilt in windows OS. It locks the SAM file.

Now again to hack the pc we need to crack the syskey. Ok then hiren boot comes in picture.

Same as bootable kali live boot your hiren boot into pen drive.

Now again same process restart your pc with hiren boot. And follow the instruction and Yo!!! You cracked the syskey also.

Now again there is a question now how to secure your pc.

   1.   Put a BIOS password.

   2.  Use 64-bit OS.

   3. Set the boot option to the hard drive as default.

     4. Use a laptop instead of using PC.

     5. Hide your credentials and private data using cmd command i.e. attrib +h        folder name

   6. Then to unhide again at the same place open cmd and type attrib –h folder  name

   7. Put the credentials and private data in a folder having different name like shaktimaan, batman etc.

   8. Search for brain.exe from google and download it.