312-50V11 · Question #6
You have gained physical access to a Windows 2008 R2 server which has an accessible disc drive. When you attempt to boot the server and log in, you are unable to guess the password. In your toolkit…
The correct answer is C. CHNTPW. CHNTPW is a Linux-based utility that directly edits the Windows SAM database to reset passwords or unlock accounts without needing to know the original password.
Question
You have gained physical access to a Windows 2008 R2 server which has an accessible disc drive. When you attempt to boot the server and log in, you are unable to guess the password. In your toolkit, you have an Ubuntu 9.10 Linux LiveCD. Which Linux-based tool can change any user's password or activate disabled Windows accounts?
Options
- AJohn the Ripper
- BSET
- CCHNTPW
- DCain & Abel
How the community answered
(25 responses)- C96% (24)
- D4% (1)
Why each option
CHNTPW is a Linux-based utility that directly edits the Windows SAM database to reset passwords or unlock accounts without needing to know the original password.
John the Ripper is a password-cracking tool that attempts to recover passwords via brute force or dictionary attacks, not directly modify or bypass them in the SAM database.
SET (Social Engineering Toolkit) is used to craft phishing and social engineering attacks, not to manipulate local Windows account credentials.
CHNTPW (Change NT Password) is a specialized Linux tool that mounts a Windows NTFS partition and edits the SAM registry hive directly, allowing an attacker to blank or change any local user password or re-enable disabled accounts. It requires only physical access and bootable Linux media, making it ideal in this scenario. No knowledge of the existing password is required because it overwrites the hash directly.
Cain and Abel is a Windows-based credential recovery and sniffing tool and cannot be run from a Linux LiveCD environment.
Concept tested: Offline Windows password reset using CHNTPW
Source: https://pogostick.net/~pnh/ntpasswd/
Topics
Community Discussion
No community discussion yet for this question.