Xatrix Security

[muto]

I've noticed that you can login to RM, without a network connection, providing that you have logged into your account on that computer before.

Therefore, RM must store passwords (or more likely hashes) on your local PC. I've already tried looking in the SAM database, but that only has a few windows accounts (guest, helpassistant, etc).

Does anyone know where/how the passwords are stored on a local PC? I have a clone of the C: drive of a PC which has had 'SysAdmin1' log in on it, so I can get access whenever I need it. Any help?

[jd2kuk]

Again, this has been posted before

Windows caches the passwords of the last 10 people to logon, so that in the event of network failure, people can still log on. The hashes for those passwords are stored in the registry, in HKEY_LOCAL_MACHINE\SECURITY\CACHE\NL$1 through NL$10.

To crack the hashes, you'll need a piece of software called cain and abel, which is a freeware password cracker. All the details you need on using it are in this post: viewtopic.php?f=26&t=1279#p3187

[heebyjeebys]

abosluty correct

[jd2kuk]

Yes, I am