Xatrix Security

First of all, you are going to need a floppy disk or a CD. You will need to download and install Login Recovery software (loginrecovery.com) to your floppy disk or CD. Then put the floppy disk or CD into the computer that is connected to the domain that you want to crack passwords off. It will boot up and get the hashes and save it to a upload.txt file on the floppy or CD. (Not sure about the cd) Upload the file back to loginrecovery.com and their servers will attempt to crack the local administrator password. If it can crack it, the passwords will show as success and will be shown to you 48 hours after you uploaded them unless you are prepared to pay.

Now you have the local admin password for that computer, if the computer has a standard XP or 2000 login screen, login to that computer as a local admin.
You are now going to need Cain availible on this site here. Install it to your Flash Drive or put the setup file on your Flash Drive and install it to that computer. (Not reccomended, and make sure to destroy any evidence afterwards)
Once you have Cain up and running you will need to click onto the Cracker tab and then MSCache (10 usernames and passwords will be cached from previous domain logons). Hit the plus sign near the top and let it dmp the files from Local System. It will then proceed to cracking them which may take a while.

If you have any problems with this Tutorial please let me know in this thread.
Hope this can help you!

You will need to download and install Login Recovery software (loginrecovery.com) to your floppy disk or CD.

just wondering insteard of doing this can you put it on a pen drive instead?

Nope.

Hmm, surely you could use it on a bootable USB drive with the right drivers?

I haven't tried it, but the site just mentioned CD and Floppy.

Ahh okay

oh well thnkz for trying anyway

Bootable usb would work and If you use the CD version you have to write down the hashes and upload them to the site.

After extracting Cain to the start menu ( must do this to run .exe, cant access local mode)
I run it but it says it needs admistrative permissions, away way to bypass this ??

EDIT: Don't worry, i'm going to use a floppy and usethen login recovery and hopefully the local admin password will be the same as the network one....

I havn't use loginrecovery in a while...
Roughly how long does it take to get the password hashes, write them to the floppy and then reboot?

hmm does this work on a laptop that is not joined to the domain?

heebyjeebys wrote:hmm does this work on a laptop that is not joined to the domain?

I dont dont think so...
It cracks the passwords of the the last 10 people to logon onto the domain from that PC.
But you already know your own password

what about a program that sniffs packets and decrypts the encryption on passwords?

Cain and abel .... download it