Windows Login password cracker is how do you do it? Here to you personally a extensive introduction to the rules of Windows login password cracking along with the particular operation and focus, so we began to speak about it one by 1:
Windows Login Password Recovery Principles:
windows prevalent in the long run authentication inside the lsass method, the default module is msv1_0.dll, plus the important in its export purpose LsaApLogonUserEx2,
this process by injecting code in to the lsass process hook LsaApLogonUserEx2, intercept passwords. As long as the authentication process,
LsaApLogonUserEx2 triggers, for instance the ipc $, runsa, 3389 Remote Desktop landing.
program to do the processing around the different programs, in 2000,2003, xp, vista on each interception,
in 2000,2003, xp, by means of UNICODE_STRING.Length significant 8 to bit xor key, if your password is encoded, then decoded by ntdll.RtlRunDecodeUnicodeString,
Office Professional 2010 Key,
vista password via the AdvApi32.CredIsProtectedW ascertain regardless of whether the encoded decoding with AdvApi32.CredUnprotectW.
lsass can run your debugger to hang about
:)
Windows login password cracking in the interface problem:
HRESULT WINAPI DllInstall (BOOL bInstall, LPCWSTR pszCmdLine);
This is the prototype of a function exported dll, make sure you do not be puzzled by the identify, this system is green.
this operate doesn't hold the set up of any motion in the start,
Windows 7 X64, to not modify the registry or method files. Just desired to decide on a consistent interface regsvr32 name it.
the very first parameter to the program is useless,
Microsoft Office Professional Plus,
second parameter, specify a file path to (be aware the UNICODE) for the recorded data is going to be saved here (Ansi a).
file path could be similar to this C: x.log,
might be as . Pipe your_pipename,
Genuine Office 2010, . Mailslot yourslot,
Cheap Office 2007,
So you compose your own loader to simply call the dll, so that dll to intercept the password data by means of the pipe or mailslot sent for your program. Data is a string (which is Ansi's)
Windows login password cracking test:
you are able to create your personal loader not rush to call, because the loader to use regsvr32 check : (you may will need to shut a number of the active defense)
regsvr32 / n / i: c: xxx.log c: pluginWinPswLogger.dll
regular, then pop up a prompt regsvr32 effective .
this time you can actually switch consumer or lock the pc and then log back again in, the procedure facts to become intercepted password down and save it to c: xxx.log.