ophcrack LiveCD 2技术资料.docx

ophcrack LiveCD 2.3.1*The ophcrack LiveCD is a bootable Linux CD-ROM containing ophcrack 3.3.1 and a set of tables (XP free small or vista free depending on the versionyou downloaded). It allows for testing the strength of passwords on a Windows machine without having to install anything on it. Just put it into the CD-ROM drive, reboot and it will try to find a Windows partition, extract its SAM and start auditing.Getting itYou can download the ISO image from SourceForge mirrors.PackageThe tables are located in directory tables. Please feel free to install ophcrack and copy the tables on your harddisk if you want touse ophcrack outside of the LiveCD.Release NotesVersion 2.3.1 is a stable public release. This LiveCD is based upon Slitaz LiveCD cooking version (). This version ofSlitaz is not released as stable, so you can expect some minor issueswhen playing with it. If youre interested in Slitaz, download the lateststable version on their website. The LiveCD has been customized to include ophcrack 3.3.1 and free tables set for either Windows XP or Windows Vista. Ophcrack will auto-detect the amout of free memory and adapts its behaviour to be able to preload all the tables it can.A shell script launched at the beginning of the X session does the job of finding the Windows partition and starting appropriate programs to extract and crack password hashes. It will look for all partitions thatcontains hashes. If more than one are found, you will have to choose betweenthem.The shell script will try to find all the tables located on the partitions it will detect. If you want that it detects your tables automatically, putthem in a directory called tables at the root of your drive/partition (e.g. tablesvista_special or tablesvista_num). Ophcrack should then automatically find and use them. If your partition is not detected, make sure your the partition containingthe hashes you want to crack is mounted and the use ophcrack Load from encrypted SAM function to recover your Windows hashes. Then click Launch and the cracking process will start.If your graphic card is not detected or you have problems launching theLiveCD in graphic mode, try launching it in text mode. 这几天收到了许多朋友的来电，说怎么偷偷破解爸妈给家里电脑设置的密码由此我百度了一下破解密码的东西还真不少，什么LC4、LC5、侠客密码查看器 saminside都可以破解，但是实际看了看，还是不行，首先LC4、LC5破解进度超级慢，因为它们是暴利破解的，要一个一个的试，好点的半个小时，RP不好就要几，而且CPU占用一直100%，包括我4核都是，而侠客密码查看器就不说了，只能进入系统后使用，如果是超级管理员（Administrator）这个账户被锁的话就没法了，但是没被锁就可以试试，在开机输入密码的画面下按两下Ctrl+Alt+Delete会进入比较简洁的密码输入框，在用户名里面输入Administrator，密码为空就可以进入超级管理员账户了，然后安装侠客密码查看器就可以查看到所以账户的用户名和密码，此方法仅限XP。而saminside界面简洁，但是破解后有许多问题，经常破解不成功，密码都是问号。-由此我发现一个比较好的软件，就是Ophcrack，来看看他的主界面，感觉很清爽，虽然都是英文的，大家可以百度一下，现在我们来学习他的使用方法，首先我们晓得XP存放密码的文件夹是C:WINDOWSsystem32config，主要要用到的是SAM和SYSTEM这两个文件，在正常使用WINDOWS下是无法拷贝的，所以要进入DOS或者是WINPE把它们拷贝下来，这里我已经拷在我的SD卡里面了，但是现在用Ophcrack这个软件还过早，因为它必须要一个东西，就是彩虹表，我们可以到/tables.php这个网站去下，下面有美元标志的是要给钱的，没有的就是免费的，我们下第一个xp free small点进去就可以下载，当然，我已经下载好了，现在我们导入到Ophcrack，好了，先点击Tables然后选择table_xp_free_small然后按install选择刚才下载的彩虹表安装，完毕后点击OK就可以了下面进行正式破解，点击Load，选择Encrypted SAM载入刚才拷贝的config文件夹，注意，由于在C盘里面的是无法访问的，所以必须拷贝下来，选择好后，就会出现用户名，此时别着急，我们把不必要的用户删掉，选择该用户按Delete删除，我们要破解的是Administrator这个用户，删除完毕后点击Crack开始破解，等待进度条完毕后就可以看到密码了，总共只用了8秒钟就破解完毕了，在NT Pwd里面显示的是破解后的密码，密码破解为a1b2c3，现在知道怎么破解了吧，难得看的朋友可以到我QQ空间里面看图文教程：/710330432/infocenter，好了就到这里了 886我的QQ：710330432我刚刚也破了一个。我们办公室的电脑没有权限，所以就把超级管理员密码破了。用WinPE启动电脑，把C:Windowssystem32下的cinfig文件夹复制出来保存到其他磁盘上。安装ophcrack软件后，到/tables.php上面下载彩虹表，一共有4个文件供下载，两个小于1G的只能破解a-z、A-Z、0-9的组合，大于7G的两个文件可以破解a-z、A-Z、0-9以及特殊字符的密码，下载文件有说明的，如果只有大小写字母和数字就下载那个703MB的就可以了，我下载了20分钟。下载后解压缩到tablesxp_free_fast文件夹里面。打开ophcrack程序