====== Windows Password Recovery ======


2020-01-26
<WRAP box>
Third-Party Utilities
Even though you can find quite a few passwords using the methods above, there are still more saved in other locations on your system. To get to these, you have to use some third party tools. My favorite site for free and clean tools is Nirsoft. There are basically three tools you can use: EncryptedRegView, CredentialsFileView, and VaultPasswordView.
All of these tools can be downloaded, extracted and run without needing to install them. This is great because it doesn’t mess with your system at all and once you are done, you can just delete the files.

From <https://www.online-tech-tips.com/computer-tips/find-hidden-saved-passwords-windows/> 
</WRAP>





====== Hashcat ======


From: https://hashcat.net/hashcat/

password recovery

<code>
World's fastest password cracker
World's first and only in-kernel rule engine
Free
Open-Source (MIT License)
Multi-OS (Linux, Windows and OSX)
</code>



====== Bypass Windows Logons with the Utilman.exe Trick ======

From: https://www.technibble.com/bypass-windows-logons-utilman/

<code>
First of all, we will need a way to access the file system to swap out Utilman.exe with 
something else like cmd.exe. There are a few ways to achieve this:

Remove the operating system hard drive from the target system and slave it into another 
system with a working operating system. From there you can swap out the files on the 
slave drive
Use a Boot CD like UBCD4Win and use the file management software there
Use the Windows Vista or 7 DVD
</code>

====== recover win7 password ======


http://4sysops.com/archives/forgot-the-administrator-password-the-sticky-keys-trick/


Just follow the following steps and everything will be ok:

  * Boot from Windows PE/RE and start the command prompt

  * Use the following command to create a copy of the Stick Keys application:
    * copy c:/windows/system32/sethc.exe c:/ (where c is the drive letter where your OS is installed)
  * The next command will replace the Sticky Keys application with command 
    * prompt: copy /y c:/windows/system32/cmd.exe c:/windows/system32/sethc.exe
  * Reboot your computer and when you see the log-on screen and
    * press Shift key five times.
  * Now you will see a command prompt window. Here you will use the following
    * command: net user you_user_name new_password
  * That’s it. Now you can use your new password to log in.
  * Don’t forget to restore the Sticky Keys application:
    * copy /y c:/sethc.exe c:/windows/system32/sethc.exe.

=== Make Administrator active ===

From: https://support.microsoft.com/en-us/kb/555910

Also: http://www.instructables.com/id/3-Ways-to-Enable-Administrator-Account-in-Windows-/

<code>
To enable the built-in administrator account, follow these steps:
Click Start, type cmd in the Start Search box, and then press Enter. 

Note If you are prompted for an administrator password or for confirmation, 
type the password, or provide confirmation.
In the search results list, right-click Command Prompt, and then click Run 
as Administrator.
When you are prompted by User Account Control, click Continue.
At the command prompt, type net user administrator /active:yes, and then 
press Enter.
Type net user administrator <Password>, and then press Enter.

Note In this command, <Password> represents the actual password that you want 
to set for the administrator account. 
Type exit, and then press Enter.
Log off the current user account.
</code>

====== konboot ======

http://www.piotrbania.com/all/kon-boot/