PDA

View Full Version : The STD/Saminside/LC4 Trick...


Wyrmwood
11-04-2006, 08:07 PM
For starters, Symantec bought LC which is kind of a pisser...

But to the question - trying to simply reset the admin pswd for a win2k3 box and knoppix STD won't recognize the poweredge CERC raid drivers. I tried a few other "security" distros (slax and plop) but everything that successfully recognizes the sata array states "problems detected on drive, entering read-only mode" so it can't write to the sam file.

Any ideas? It's a poweredge 850 running win2k3 with a standard cerc sata raid controller, and yes - I tried brute/dictionary forcing the pwd but GOD does that take forever.

Just looking for a distro that recognizes the array and gives me read/write access to the boot drive...

bird603568
11-04-2006, 08:28 PM
wait is it a built in "winraid" or is it an actually raid card?

Wyrmwood
11-04-2006, 09:45 PM
It's a Dell/Adaptec CERC sata 1.5/6ch card pci-x card running 2 arrays.

SLAX picks up the drives, but doesn't have chntpw or ntpassword on it - so I can copy the SAM and System and bruteforce the pwd, but I'm not that patient...

Knoppix STD and PLoP won't recognize the drives at all.

Found a bootable recovery iso (http://home.eunet.no/pnordahl/ntpasswd/)that lets me autodetect, but it doesn't seem to like writing to the NTFS...

bird603568
11-05-2006, 12:15 AM
cant you just install it in slax and bam youre done?

noonebutme
11-06-2006, 10:18 PM
Slax is a livecd.

And just copy the SAM files over and then use rainbowcrack tables to crack the password - http://rainbowtables.shmoo.com/ to download a precompiled table.