Crack Win XP Administrator Password?

Question

How can I Crack Win XP Administrator Password

Answer 1

hi
Ok, so you say you forgot your Windows administrator's password, huh? Oh well, it doesn't really matter if you did or you just say you did. The fact is that you need to gain access to a computer and you cannot "remember" the administrator's password.

How can you get out of this situation without formatting and re-installing the operating system?

One method of gaining access to the system is by trying hard to remember the forgotten password, or a password of another user which has the same level of administrative rights. However I don't think this approach will help you, otherwise you wouldn't be sitting here reading article, would you?)

Another method is by trying to restore a backed up System State (in Windows 2000/XP/2003) or a ERD (in NT 4.0) in which you do remember the password. The problem with doing so is that you'll probably lose all of the recently add users and groups, and all the changed passwords for all of your users since the last backup was made.

A third method might be to install a parallel operating system on a different partition on the same computer, then use a simple trick to gain access to the old system. Read more about it on my Forgot the Administrator's Password? - Alternate Logon Trick article.

Note: If you are looking for password cracking tools that can be used for miscellaneous objectives such as password-protected PDF documents, zipped archives, Office documents, BIOS protection and so on then this pages is NOT for you. See some links at the bottom of this page for hints on where to find such tools, but I can tell you right away that Google might be a better choice for you.

The fourth option is by using 3rd party tools that will enable you to reset the lost password and logon with a blank password.

Update: You can also discuss these topics on the dedicated Petri.co.il Forgot Admin Password Forum.

Translations of this article
There are some translations made of this article. Here are the ones I am aware of (do tell me if you know of another, or if you want to create one in your language):

Portuguese - HERE is an excellent translation of this article into Portuguese (by Bruno Koga - Thanks!)

Serbian - HERE (by Aleksandar Stojilkovic - thanks!)

Spanish - HERE (by Victor Pereyra - thanks!)

Free Tools
Here are some of these tools:

Free Windows password-cracking tools are usually Linux boot disks that have NT file system (NTFS) drivers and software that will read the registry and rewrite the password hashes for any account including the Administrators. This process requires physical access to the console and an available floppy drive but it works like a charm! I've done it myself several times with no glitch or problem whatsoever.

Beware!!! Resetting a user's or administrator's password on some systems (like Windows XP) might cause data loss, especially EFS-encrypted files and saved passwords from within Internet Explorer. To protect yourself against EFS-encrypted files loss you should always export your Private and Public key, along with the keys for the Recovery Agent user. Please read more about EFS on my What's EFS? page. Out of the following list, the only tool that will no cause any harm to EFS-encrypted files on your hard disk is the Windows Password recovery system.

Here are 5 of these free tools:

Windows Password recovery - Can retrieve forgotten admin and users' passwords in minutes. Safest possible option, does not write anything to hard drive.

Petter Nordahl-Hagen's Offline NT Password & Registry Editor - A great boot CD/Floppy that can reset the local administrator's password.

Openwall's John the Ripper - Good boot floppy with cracking capabilities.

EBCD – Emergency Boot CD - Bootable CD, intended for system recovery in the case of software or hardware faults.

Austrumi - Bootable CD for recovering passwords and other cool tools.

If you happen to know about other free tools please let me know .

Note: These password resetting tools are usually good for local users on a stand alone computer. For Domain Admin password resetting procedures please see the Related Articles section at the bottom of this page.

Note: I'd like to put together all the info you have about these issues. If you have any tips, recommended links or any ideas about how to figure out a lost password - please e-mail me and I'll get back to you .

Windows Password recovery
http://www.loginrecovery.com

This site provides a tool to recover lost Windows XP passwords. It works for administrator and user accounts, it doesn't change the password just tells you the old one. It works with encrypted files (EFS) and password hashes. It even works if no passwords at all are known for the machine (as long as you have another computer with internet access to view this website with).

Author claims it also works with Windows NT and Windows Server 2003 and Windows Longhorn, but the BEST thing about it is the fact that it won't reset your passwords, but simply reveal them for you to remember and then use.

Give it a try. The author would like to receive feedback. There is a free service as well as a priority service that will retrieve your passwords within minutes. The fee for the priority service is very cheap, and is really just to cover server costs.

Note: You'll need a blank floppy to run the process.

Update: Author now offers the same tool as a CD image for those of you who do not have a floppy in their computer.

Usage, instructions and additional information can be found at

http://www.loginrecovery.com

Offline NT Password & Registry Editor (v050303)
Petter Nordahl-Hagen has written a Windows NT/2000/XP offline password editor:

http://home.eunet.no/~pnordahl/ntpasswd

This is a utility to (re)set the password of any user that has a valid (local) account on your Windows NT/2000/XP/2003 system, by modifying the encrypted password in the registry's SAM file.

You do not need to know the old password to set a new one.

It works offline, that is, you have to shutdown your computer and boot off a floppy disk or CD. The boot-disk includes stuff to access NTFS partitions and scripts to glue the whole thing together.

Works with syskey (no need to turn it off, but you can if you have lost the key)

Will detect and offer to unlock locked or disabled out user accounts!

Caution: If used on users that have EFS encrypted files, and the system is XP or later service packs on W2K, all encrypted files for that user will be UNREADABLE! and cannot be recovered unless you remember the old password again!

Download links:

bd050303.zip (~1.1MB) - Bootdisk image, date 050303.

cd050303.zip (~3MB) - Bootable CD image with same version and drivers as floppies above

sc050303.zip(~1.4MB) - SCSI-drivers (050303) (only use newest drivers with newest bootdisk, this one works with bd050303)

To write these images to a floppy disk you'll need RawWrite2 which is included in the Bootdisk image download. To create the CD you just need to use your favorite CD burning program and burn the .ISO file to CD.

Support and Problems? Don't call me! Talk to the creator of this great tool. He also has a good FAQ set up covering most of the day-to-day questions. Read it right HERE

Author claims that this tool was successfully tested on NT 3.51, NT 4, Windows 2000 (except datacenter), Windows XP (all versions) and Window Server 2003. Notice that it is NOT compatible with Active Directory.

Need to change Windows NT/2000 Domain Admin password? This tool, however useful, will only reset the local administrator's password (e.g. the one found in the local computer's SAM). To reset a password of a domain administrator (or any other user for that matter) you must perform the routine that is described in the following page: Forgot the Administrator's Password? - Reset Domain Admin Password in Windows 2000 AD.

Note: The above trick will probably not work under Windows Server 2003 due to service account security changes. To work around these limitations please read the Forgot the Administrator's Password? - Reset Domain Admin Password in Windows Server 2003 AD page.

John the Ripper (v1.6)
John the Ripper is a fast password cracker, currently available for many flavors of Unix (11 are officially supported, not counting different architectures), DOS, Win32, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix flavors, supported out of the box are Kerberos AFS and Windows NT/2000/XP LM hashes, plus several more with contributed patches.

Read more at http://www.openwall.com/john

Download links:

John the Ripper 1.6 (768kb)

EBCD – Emergency Boot CD (v0.60)
EBCD is a bootable CD, intended for system recovery in the case of software or hardware faults. It is able to create backup copies of normally working system and restore system to saved state. It contains the best system software ever created, properly compiled and configured for the maximum efficient use.

EBCD will be very useful when you need to:

Copy/move files (with long names, not necessary in CP437 encoding) from/to the disk but OS which can handle them (windows, Linux...) cannot boot. In particular, you may create a backup copy of normally installed and configured Windows and later restore Windows from such backup copy. So, in the case of fault OS itself and all software and its settings can be restored in 5-10 minutes.

Perform emergency boot of Windows NT / 2000 / XP. When the loader of this OS on the hard disk is damaged or misconfigured, you are able to load OS using another, standalone loader from this CD.

Recover master boot record of HDD. This allows to boot OS after incorrect uninstallation of custom loader (LILO, for example), which made all OS on your PC not bootable.

Delete, move, copy to file (image) and re-create partition from file. Image transfer over network is also supported: so you may configure one PC and then make contents of hard disks of other PCs same as contents of the hard disk of the first one.

Change password of any user, including administrator of Windows NT/2000/XP OS. You do not need to know the old password.

Recover deleted file, even file re-deleted from Windows Recycle Bin, and, in contrast, wipe single file or a whole disk so that it will be impossible to recover it in any way.

Recover data from accidentally formatted disk. Sometimes it helps to recover data from the disk, damaged by a virus.

Recover data from a floppy disk, which is not readable by OS. Format 3.5" disk for 1.7 Mb size.

Also the disk includes full set of external DOS commands, console versions of the most popular archivers/compressors.

Moreover, emergency boot CD includes minimal Linux distribution (Rescue Linux distribution) which may be very useful to a professional user.

Read more at http://ebcd.pcministry.com

Download links:

EBCD Pro distribution (18mb)

More download links: HERE, HERE, HERE, HERE and HERE. One of them has got to work, and if not, please send me a note.

Austrumi (v0.9.2 - December 2004)
Austrumi is a Linux bootable ISO image for recovering NT passwords and other cool tools and methods, sized for Business Card size CD media (50Mb). It allows you to change any password, including that of the Administrator, on a partition occupied by Windows NT, Windows 2000 or Windows XP. Simply boot the CD and when you get to the initial boot prompt, type:

boot: nt_pass

This will launch a console utility that will detect Windows partitions on the hard disk and provide you with a menu to modify any user or Administrator passwords on the Windows system. It will even give access to the Windows registry for recovery purposes. Quite a handy utility to keep in your wallet (AUSTRUMI is small enough to fit on a business card-size CD) if you are unfortunate enough to having to deal with Windows machines in your line of work.

Answer 2

Reboot your computer. When the BIOS loads up it should prompt you to press F2 or F8 or some other function key. When you press that key it should bring up a menu. Select Safe Mode. Now there should be a User Account named "Administrator". Click that and now you can go into the Control Panel and User Accounts to change/delete passwords. You can also make new accounts with Administrator powers.

Answer 3

Go to google, type cracking or hacking Windows XP passwords and you will be amazed at the number of utilities available there.

Answer 4

what cutie says has no effect on windows, just on a bios password.
if you can boot in safe mode and log in as admistrator and there is no password, then you can delete the password, reboot as normal and there will be no password. sometimes it will ask for a password, but it is blank and you can just hit enter.
If there is a password on the admin account in safe mode, you have to get software to create a bootable cd that will log you in in nt and allow you to delte or change the passowrd on any account. or you can try this
here.http://pubs.logicalexpressions.com/Pub0009/LPMArticle.asp?ID=305
These instructions are for the purpose of repairing your own computer, if you are using them for no good, then you are a loser

Answer 5

get you back in to windows xp user account if you forget you user
account password

TO GET BACK IN TO YOUR USER ACCOUNT DESKTOP
if you dont have a user COMPUTER ADMINISTRATOR ACCOUNT USER ID
shut down the computer remove the power cable
take the computer cover off
now look in side the computer
next to the computer motherboard not on the motherboard next to it

there is a silver battery it is a silver clip silver battery
you remove the silver battery wait for 1 minute .. 1 minute not 30 seconds you must keep the silver battery off for 1 minute then you put the silver battery back on then you put the cover back on the computer then you put the power cable back on the power point at the back of the computer then you restart your computer
and you will come back to the user account login screen click on your user account and windows xp will log in with out asking for the user account password then you click on start /control panel click on user account icon ... then you click on your user account icon and creat a new password ..windows xp with all your settings
windows xp with all your settings will be as they was befor you lost your password all your desktop settings and files will still be there ...then restart your pc for settings tobe saved

Answer 6

one possible way to do that is reboot the computer in safe mode, log on as Administrator and remove the password for the person you want to log on as

Answer 7

if the logon is classic (the username and password above each other) type in administrator and see what happens, some people don't know about it.

Answer 8

I frequently spend my half an hour to read this blog's posts daily along with a mug of coffee.

Answer 9

I would tell you the exact way, but I don't know if it will be used for good or evil.

Answer 10

Now I'd be lying if I said I didn't know how

Answer 11

I think you just have to reinstall Windows from scratch.