nerdexam
EC-Council

312-50V11 · Question #6

You have gained physical access to a Windows 2008 R2 server which has an accessible disc drive. When you attempt to boot the server and log in, you are unable to guess the password. In your toolkit…

The correct answer is C. CHNTPW. CHNTPW is a Linux-based utility that directly edits the Windows SAM database to reset passwords or unlock accounts without needing to know the original password.

System Hacking

Question

You have gained physical access to a Windows 2008 R2 server which has an accessible disc drive. When you attempt to boot the server and log in, you are unable to guess the password. In your toolkit, you have an Ubuntu 9.10 Linux LiveCD. Which Linux-based tool can change any user's password or activate disabled Windows accounts?

Options

  • AJohn the Ripper
  • BSET
  • CCHNTPW
  • DCain & Abel

How the community answered

(25 responses)
  • C
    96% (24)
  • D
    4% (1)

Why each option

CHNTPW is a Linux-based utility that directly edits the Windows SAM database to reset passwords or unlock accounts without needing to know the original password.

AJohn the Ripper

John the Ripper is a password-cracking tool that attempts to recover passwords via brute force or dictionary attacks, not directly modify or bypass them in the SAM database.

BSET

SET (Social Engineering Toolkit) is used to craft phishing and social engineering attacks, not to manipulate local Windows account credentials.

CCHNTPWCorrect

CHNTPW (Change NT Password) is a specialized Linux tool that mounts a Windows NTFS partition and edits the SAM registry hive directly, allowing an attacker to blank or change any local user password or re-enable disabled accounts. It requires only physical access and bootable Linux media, making it ideal in this scenario. No knowledge of the existing password is required because it overwrites the hash directly.

DCain & Abel

Cain and Abel is a Windows-based credential recovery and sniffing tool and cannot be run from a Linux LiveCD environment.

Concept tested: Offline Windows password reset using CHNTPW

Source: https://pogostick.net/~pnh/ntpasswd/

Topics

#CHNTPW#password reset#Windows authentication#offline attack

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice