Ophcrack is a Windows password cracker based on a time-memory trade-off using rainbow tables. This is a new variant of Hellman's original trade-off, with better performance. It recovers 99.9% of alphanumeric passwords in seconds.
- Cracks LM and NTLM Windows hashes
- Free tables available for Windows XP, Vista and 7
- Brute-force module for simple passwords
- Audit mode and CSV export
- Real-time graphs to analyze the passwords
- LiveCD available to simplify the cracking
- Loads hashes from encrypted SAM recovered from a Windows partition
Although Ophcrack isn't rated for Windows 10, it did yield passwords on three accounts on two Toshiba Satellite laptops running that OS, so it performed beyond the stated scope of its duty. Burning the files to make a bootable CD was easy. Figuring out how to use the program took me some time. The LiveCD version comes with a 'rainbow table' to compare password hashes against, but getting the table to hook up to the program after starting the computer from the CD was not automated. I had to work out which logical volume to access to use the table. In this case, SR0. Here's a hint for those trying to access Windoze machines that won't start from the optical drive: quit the computer by holding down the start button until it quits. Then, boot it again while holding down the F12 key (for Toshiba Satellite), or whatever key is supposed to bring up the boot table on the particular machine. You will get a list of bootable devices, from which you can select the optical drive.
trying to get admin pwd from an XP embedded SP3 install. Admin pword seems to be stored in NT hash only (no LM listed). So I've tried using all the vista tables (free ones) but it returns not found. Any other ideas? Seems to be no forum for support. thx
I have used Ophcrack in the past with XP and Win 7 with good results but I have a Win 10 Asus with dual displays and Linux does not seem to be happy with it. 'No X server running' or 'cannot connect to X server :0.0' errors seeming to indicate a problem talking to my display. Tried 1 display at a time with no change. Text is coming across fine. Thought I could just run text mode but so far I cannot find any instructions or commands for running Ophcrack in command-line. Anyone able to help out to be able to run either way? I would give a Good rating if I could run the program as I have in the past. Going to the forum link takes me to the review page.
flawless. keep up the good work.
Last livecd 3.6.0 version does not work because it does not have table. livecd version 3.4.0 was very good.