how to HACK a password // Windows Edition

Рет қаралды 1,318,550

11 ай бұрын

Create passwords I can’t hack with Dashlane (unlike Michael): dashlane.com/networkchuck50 (50% off) with code NETWORKCHUCK50
It is surprisingly easy to hack a password on Windows. In this video, NetworkChuck will demonstrate how you can grab a password hash from a Windows computer and reveal the passwords with a tool called impacket secrets dump. Once we have the hash, we can use a password cracking tool called Hashcat (a popular tool in Kali Linux), to crack the password.
VIDEO HELP
---------------------------------------------------
Mitigation Techniques: attack.mitre.org/techniques/T...
SECURITY MEASURES YOU NEED TO DISABLE TO USE ALL FEATURES IN THIS VIDEO
-Disable “DisableRestrictedAdmin” (this allows winrm and rdp access with a hash): reg add HKLM\System\CurrentControlSet\Control\Lsa /t REG_DWORD /v DisableRestrictedAdmin /d 0x0 /f
-Turn off Windows Firewall
-Enable RDP and add user to RDP users group
🔥🔥Join the NetworkChuck Academy!: ntck.co/NCAcademy
**Sponsored by Dashlane
SUPPORT NETWORKCHUCK
---------------------------------------------------
➡️NetworkChuck membership: ntck.co/Premium
☕☕ COFFEE and MERCH: ntck.co/coffee
Check out my new channel: ntck.co/ncclips
🆘🆘NEED HELP?? Join the Discord Server: / discord
STUDY WITH ME on Twitch: bit.ly/nc_twitch
READY TO LEARN??
---------------------------------------------------
-Learn Python: bit.ly/3rzZjzz
-Get your CCNA: bit.ly/nc-ccna
FOLLOW ME EVERYWHERE
---------------------------------------------------
Instagram: / networkchuck
Twitter: / networkchuck
Facebook: / networkchuck
Join the Discord server: bit.ly/nc-discord
AFFILIATES & REFERRALS
---------------------------------------------------
(GEAR I USE...STUFF I RECOMMEND)
My network gear: geni.us/L6wyIUj
Amazon Affiliate Store: www.amazon.com/shop/networkchuck
Buy a Raspberry Pi: geni.us/aBeqAL
Do you want to know how I draw on the screen?? Go to ntck.co/EpicPen and use code NetworkChuck to get 20% off!!
fast and reliable unifi in the cloud: hostifi.com/?via=chuck
- Password cracking techniques
- How to hack a password on Windows
- Cybersecurity vulnerabilities
- Cyberattacks and network security
- Kali Linux for password hacking
- Hashcat and CUPP for password cracking
- Pass the Hash attack
- NTLM and RDP security
- WinRM for remote access
- Ethical hacking for information security
- IT security and password protection
- NetworkChuck's password cracking tutorial
- Learn password cracking on NetworkChuck
- Understanding cybersecurity and password hacking
- Protecting against password hacking
- Information security and password protection
- IT security best practices for passwords
#passwordhacking #passwordcracking #windows

Пікірлер: 1 500

@NetworkChuck 11 ай бұрын

Create passwords I can’t hack with Dashlane: dashlane.com/networkchuck50 (50% off) with code NETWORKCHUCK50 VIDEO HELP --------------------------------------------------- Mitigation Techniques: attack.mitre.org/techniques/T1003/002/ SECURITY MEASURES YOU NEED TO DISABLE TO USE ALL FEATURES IN THIS VIDEO -Disable “DisableRestrictedAdmin” (this allows winrm and rdp access with a hash): reg add HKLM\System\CurrentControlSet\Control\Lsa /t REG_DWORD /v DisableRestrictedAdmin /d 0x0 /f -Turn off Windows Firewall -Enable RDP and add user to RDP users group 🔥🔥Join the NetworkChuck Academy!: ntck.co/NCAcademy **Sponsored by Dashlane

@Obama_ 11 ай бұрын

@loadrocks1235 11 ай бұрын

My parents won’t let me and I got hacked plz help me ):

@JeffJeycyn 11 ай бұрын

Hy I'm just a kid interested in coding and I kinda need your help

@shootproof7080 11 ай бұрын

How not to hack a password. CLS

@elvendragonhammer5433 11 ай бұрын

You forgot to close the CMD/Powershell window on his PC so unless he's not used to your antics yet he knows something is up lol

@mahendrabezzavarapu5520 8 күн бұрын

It just kept glitching on me when I tried this video tutorial so firstly I would say thank you for the video and secondly, thank you Dale Valskov meeting you was a blessing in disguise keep up with the good work I'm sure a lot of people will be needing your assistance iin the nearest future after seeing this

@ChetanChetansahuh-zp4dx 8 күн бұрын

The efficiency of this Dale Valskov is next level. To juggle walk throughs of various angles on the topic delivered to-camera, differnet content per topic from various folks underneath the umbrella of the track list of the larger big band concert itself is engaging and refined. To make a dense taccess like this so digestible is really something. Awesome work jack!!

@ChabinBarman-jr7bz 8 күн бұрын

We need more immeasurably wise and compassionate humans like you on this planet. Thank you for sharing Dale Valskov , Jon. I bet I'm not alone when I say this video found me at the perfect moment, and there are a lot of things here that I needed to hear right now.

@VMFREEFIREGAMING 8 күн бұрын

Having someone like you who’s not only a great innovator but also pulls his best to get the work done so beautifully needs nothing but appreciation. Dale Valskov Thanks for the well off work you consistently bring your all and I truly appreciate that. Thank you for making corporate life so smooth. Proud to have you on our team. Great work as always.

@user-qy3oc7gp2j 8 күн бұрын

I just wanted to say thank you for sharing this. Because you're right. The worst thing that you can feel is hopelessness. And I hope that someone who is on the verge of losing hope finds Dale Valskov and realizes that as long as you're still alive and breathing, there's a chance, there's HOPE that the future is brighter then the present day.

@user-wv5wm5xk6h 8 күн бұрын

My account also got hacked and I followed the method as explained in this video but I'm unable to proceed after recording the selfie video. Thank you Dale Valskov . I'm really happy seeing his name everywhere in the comment. It really says a lot about his good work.

@destroychihuahua 10 ай бұрын

I just found your channel two hours ago and you’ve already answered dozens of my questions across 3 videos. You’ve got my attention 😂

@jakesteel3641 11 ай бұрын

Next time be sure to close the cmd window with your commands and delete the files you saved. Many hackers caught by not covering their tracks. Watch the clip you forgot this.

@ShinyTechThings 11 ай бұрын

Yup, he did 🤔

@Shimi1990 11 ай бұрын

LOL saw that too😂

@Destuctor28 11 ай бұрын

Hahaha hilarious to see that we all noticed it 😂

@yaboiJCMdagoat 11 ай бұрын

I’m pretty sure if he was doing it for real he would do all of that

@noviccen388 11 ай бұрын

relax and chill bro, it's staged. he knows whats he is doing

@Angadss101 11 ай бұрын

“He doesn’t even know” Also CMD open: 😂

@TheCrazycrab2 6 ай бұрын

What blows me away is someone created hash cat, someone created CUPP, there are truly some brilliant minds out there that are on a level which is almost incomprehensible

@MithunKushwah-yp2gi 8 күн бұрын

Amazing job! Dale Valskov I wasn’t able to see my account name at first because the name was changed. Also I really valued this information but thanks Jon even tho it showed a lots of error at my ends you still tried in helping fixing it. Happy I got it back y’all.

@havaduman2689 11 ай бұрын

I've had the feeling BTC would be going to 3k as well. Clearing out all my Alts going into BTC and MA230FH only, maybe a little BNB.

@user-jl5cx8yb7i 9 ай бұрын

ALLHACKZEB help you aloot ❤❤❤

@yusufmusaoz 11 ай бұрын

Thank you for the update MA230FH is done right, and waiting is part of the process,

@rajaramanv 10 ай бұрын

I quite enjoyed the suspense, drama and all the fun you had. You are definitely not a boring computer nerd !

@imgunnaduwit 11 ай бұрын

youre vids are very well made and make learning white hats stuff very interesting, I'm a beginer and the more I watch your stuff the more it makes me want to learn keep up the good work

@dreadesina5216 8 ай бұрын

I know this is for educational purposes but most system now add salt to the password before it's hashed and also re hash it many times which mean the complexity is way too high to crack via brute forcing or rainbow table. I'm a developer and this is how we store password in the DB with some good library and I'm perplexed that window use MD4 while SHA256 is the most secure Hash function. Anyway good stuff like always haven't been on here in a minute your charismatic is what I came out here for and hoping I can grow my patches beard to your level 😀

@seanfager8063 11 ай бұрын

Nice. I had to break into a Windows system, once upon a time, when our vendor lost their password list for our site. Used the ol' "crash it over and over until it lets you boot into cmd/"DOS", replace the accessibility tools with a copy if cmd.exe, and manually modify the registry via the command prompt Windows launches instead of text-to-speech type stuff after a reboot" method. Works, but is a replacement for existing passwords rather than a data pull, so it's super obvious after the fact.

@Harrun 11 ай бұрын

Hey Chuck! Love your videos, they are super entertaining

@jeffburkholder2148 9 ай бұрын

very cool. Have watched a few of your videos. Question: what software are you using to write/draw on screen when doing the videos?

@narayan..7518 11 ай бұрын

I love this "educational" content. You're the best

@unknown-userGohst 11 ай бұрын

One of your top coolest videos Chuck! I learned a lot :)

@Mr.Programs1256 11 ай бұрын

Thats incredible i love all your video ! Keep doing good content like this !🙂

@somarm6929 11 ай бұрын

Great stuff as usual, I love your videos Chuck you are a great cybersecurity teacher and specialist. I enjoy your videos a lot and learn a lot from you. You are the best

@somarm6929 11 ай бұрын

@elenaalice4391 Thank you for the tip I'll definitely check them out

@notleonid 11 ай бұрын

" He doesn't even know... What a sucker 😈" *left with the command prompt open with all the command history*

@Jessterr2 8 ай бұрын

I'm in a software engineering school right now. I think you just helped me affirm my major choice. Thanks lmao

@jackjaguarygo 4 ай бұрын

Would that be Cyber Security? I'm curious what type of degree or work this can translate to. It peaked my interest and I'd like to do something career-wise that involves this! Just want to make sure I recognize the proper track and stay on it! :)

@lebothegizebo 10 ай бұрын

You can actually do this without being logged in. If you exploit CMD to be open on the login screen, it still works if you replace something like accessibility with CMD with a windows repair drive or if you do it by holding shift plus restart and going into cmd

@Shubham-Mishra 11 ай бұрын

Hey man, please post videos frequently, We miss you ❤

@DeNikow 11 ай бұрын

FYI, for domain users it's not the SAM hive but rather the SECURITY registry hive. The mistake that is often made is allowing end users to be local administrators on their endpoints within a domain. If an unknowingly system administrator then logs on to the PC with a domain administrator account or an account with local administrator on a domain member server, you're basically screwed if the endpoint is hacked. Even if the end user is not local admin, it's still really bad practice as there are other ways to elevate privileges depending on software used, Windows up-to-dateness etc.

@user-xj1hl9qk6p 10 ай бұрын

Love your videos!!! Quick side note/observation/comment and a pretty much rhetorical question, its not so much of a "hack" when having to disable firewall, add user and possibly enable RDP and disable restricted admin, is it?? I dont know you may have addressed that at the start of the video, your pretty thorough so i would assume that you mentioned that, which makes me ponder the fact that i am writing this right now, past the point of return!!!! Thanks for the hours of entertainment AND KNOWLEDGE (more importantly) you have provided!!

@MasteringAnySkillAndKnowledge 7 ай бұрын

Chuck, you showed great composure, impressive experiencea! Awesome...

@chuckfinley4869 11 ай бұрын

leet mode is for leet text. Leet or 1337 is a way of writing used on the internet, in which the usual letters that are used to spell a word are replaced by numbers or special characters

@priyojitdeb1891 11 ай бұрын

03:58 you left the CMD window open for Michael to see

@celinediarra4906 11 ай бұрын

Thank you very much Chuk for such a great content.

@gerowen 11 ай бұрын

Years ago I used a Linux package called "chntpw" to forcibly reset the local Admin password on Windows machines. It's available in basically all Linux distributions and you just have to be able to mount the drive in question.

@camelotenglishtuition6394 11 ай бұрын

Right.. or just boot from a nix distro and copy the windows files ..

@zyphon7 11 ай бұрын

Frankly I’m just concerned with what Michael is doing in the bathroom. That’s a long break 😂

@lgndw 10 ай бұрын

The way I used to do it was my own way I had loads of netbooks from ebay that had xp and vista on them so I fired up kali linux live installed chntpw looked in system 32 files for configuration folder then looked for SAM files put in a few commands and I got full access to the hdd.

@kapzvara5732 9 ай бұрын

Great video thanks for this really interesting video on hashs

@sonniiiiii 11 ай бұрын

Awesome! Love your content. ❤

@JensSkov 9 ай бұрын

Love that T-shirt! I missed the affiliate link for that one :)

@maltebjorklund4354 5 ай бұрын

really good explaining! You just got a like!!

@anaprivrat6050 10 ай бұрын

The way you approached my request in getting back my account added so much to it. It’s great to see how your unique perspective contributed to the outcome. The role you play on your job *Web back doors* is crucial. I really appreciate the constructive feedback you give to me regularly. Thank you for taking the time to work with me on this. It helped me get so much and also got my account back.

@DmitriyK007 11 ай бұрын

Awesome video! Few questions. I hope Micheal staged this pass, and it is different from his common password(lol). 2, typically, on Windows, when you rdp, it kicks the logged-in user from the machine. Is Xrdp different?

@nayanchoudhary4353 11 ай бұрын

It should not be different experience. The person on the PC is locked out.

@tylerloomis3160 10 ай бұрын

FYI, leet is short for leetspeak, where you substitute numbers for letters (leet=1337) It was popular last century in IRC chat.

@PotatoNachoIT 9 ай бұрын

who in the world would leave their computer ON without security where there is someone like chuck

@kreesky 10 ай бұрын

Any advice would be appreciated, I did all the steps in your video but hash-cat keeps saying EXHAUSTED. I even changed my password to something super simple and even WROTE it on the .txt, still says exhausted. Please help?

@microsoftsarker 6 ай бұрын

Thanks man!! It was helpful 😃Thanks a lot

@justice32legends 11 ай бұрын

Oh no don't! Don't give me hope...

@wizix9877 11 ай бұрын

next episode, Micheal suing NetworkChuck for emotional damage.

@dany2685 11 ай бұрын

Normally system folders should have administrator protection and it is not that easy to copy those files but this is a good beginner example of how to crack windows passwords

@dennisaleander5175 11 ай бұрын

Linux does that but it forces the user to input the account password every time which is not convenient.

@user-su5lw4tm5z 11 ай бұрын

Love you MR.chuck thanks for your content ❤❤❤

@SisandaSibiya-ur1cy 11 ай бұрын

Bro was fighting for his life in that toilet😂😭

@funkyjunky3224 11 ай бұрын

This is amazing and I’m going to do something similar but use a rubber ducky and such. How would this would across different networks. Thinks a home firewall will stop you from connecting to a friends computer?

@Matrixred11 3 ай бұрын

in one day i think i whatched all ur videos, good videos.

@Kenny_the_WBSK 11 ай бұрын

"He doesnt even know" *leaves cmd on* XD all jokes aside this is good information and I will try it out on my system as well for fun. Thanks chuck :)

@VILLAINYT-xv2fe 8 күн бұрын

It's amazing what you do Dale Valskov We need a lot of people with your skills and set who have good intentions and spread love

@leewright6982 11 ай бұрын

Very impressive video again Chuck, is there anything like this for Apple os?

@youssefshares 11 ай бұрын

You are such an inspiration to me ❤

@kristenarias2022 10 ай бұрын

Fewer problems, more solutions - keep working like this and nothing will be able to stop you from reaching the top. Good job *Web back doors* , Even the smallest of jobs well done will take you one step closer to the success you have always dreamed about. Keep it up Mate

@zehra.5479 10 ай бұрын

Your work speaks volumes of the kind of man you are - efficient, organized and result-oriented. Well done MetaspyClub Best Social Media Expertise Within you is the absolute power to rise above any situation or struggle, and transform it into the strongest and the most beautiful version of you ever.

@ShinigamiAnger 11 ай бұрын

There are also some cheap pendrives that do all the work for you, you just plug it in for a short period of time and they do all the work. That’s why you want to use a different account as the administrator AND an hardware key (yubikey like)

@Obama_ 11 ай бұрын

Great video as always

@Felos_Felopoulos 11 ай бұрын

nice video as always!!

@lokeshsharma7703 4 ай бұрын

This so helped me a lot in my hacking journey Thank you so much 🙂🙂🙂🙂

@An.Individual 11 ай бұрын

3:58 Chuck leaves the command prompt open so the guy will know what has happened. Rooky mistake.

@SeRoShadow 11 ай бұрын

Here is an easier way to OVERRIDE the password on any Windows OS. Run cmd then type : net user %username% * Input the new password to whatever you wish ( even blank ) and thats it. PS: as in video, you need access to an user account with admin priviledge.

@charalampost769 11 ай бұрын

Great video Chuck, but is this for local or microsoft account? or both?

@test-rj2vl 10 ай бұрын

I remember there was a live CD that could boot window computer and then use dictionary on those hashes. So you could basically make usb drive, take it to school computer class during the break when teacher was not there and get admin password to install some games.

@JackInSuit 11 ай бұрын

Hey @NetworkChuck you should consider creating a tutorial on how to make a pssword manager on a usb stik that encrypts your passwords. So like when you put in a password there is a rule that states A = 123 for example. I keep trying to do this but I am confused lol

@Cyhawkx 11 ай бұрын

Dude just use a normal password manager like keepassxc or 1password

@zeenxdownz 11 ай бұрын

@@Cyhawkx thats not the usual way that (i) or possibly (other programmers) do it. it's pretty fun to do, imagine making your own little lab with your own password manager. it's not for storing passwords, its for fun :D wish you luck.

@DadVlogsContentWarning 11 ай бұрын

Great Video!

@somnullty 5 ай бұрын

chuck: leaves terminal opened chuck: he doesnt even know

@Antonio-vf2xj 9 ай бұрын

After some time, I managed to actually make an USB that when you put on a pc and run a file, gravs those saves files from reigstry, also does other stuff like get the user name, ect, (to get something to make the passwords list later), it's pretty insane how actually it's so easy, but also hard, to hack people And before you say, yes, I tested it but I'm not using it to hack anyone else without him knowing. Anyway, I love this video, and this channel!

@petershepherd447 8 ай бұрын

Anyone notice how Chuck left open the command prompt window with the commands in it on his employees computer? xD

@shyguy6185 10 ай бұрын

Chuck: "He doesn't even know" Also Chuck: Leaves CMD window WITH COMANDS USED open and Saved files in folder.

@DerekNhyira 10 ай бұрын

Yea, noticed it.

@faltadeinformacao5373 10 ай бұрын

great video just a small detail was missing during the explanation of the attack windows must have remote desktop and that it is activated for it to make the connection just a question is this a local attack?

@wonkavision4k758 7 ай бұрын

great video! so what about the wifi password . is that password you found just for windows?

@sanjuk3 11 ай бұрын

Noticed he left the terminal open and michael doesnt notices it? LOL:))

@knucklewazowski812 2 күн бұрын

3:55 leaves cmd codes on his computer. then michael comes back and "He doesn't even know" LMAO.

@noviccen388 6 ай бұрын

10:03 does that work only for the same network segment? or it can be inter-network connected?

@uknowme4398 8 ай бұрын

00:00 Hacking Michael's Windows password using hash cracking 01:27 Obtaining system registry hash via command line 02:58 Secure your passwords with Dashlane 04:49 Extracted NTLM hashes can be cracked using password guessing tools 06:18 Hackers use dictionary attacks to crack passwords in data breaches. 07:57 Successfully hacked into a Windows machine using a dictionary attack 09:30 Pass the hash attack allows access to Windows computer without password. 11:01 Disabling security features was necessary to detect registry keys and execute commands remotely. Crafted by Merlin AI.

@Evil_Spotify 3 ай бұрын

Underrated comment

@8080VB 11 ай бұрын

Wow Secretdump is like the windows version of unshadow . Very cool !

@cswann8 11 ай бұрын

Hi Chuck. I'm wanting to build a Plex server on my newly built Rasberry PI 4 x64 lite. The Pi is up and running on my home network and I can access it via SSH. But I'm wondering if running Plex in a Docker container would be the way to go vs just installing Plex natively on the Pi. Any thought or tips are appreciated.

@SamOfTheSmokies76 11 ай бұрын

Thanks for the vid man :D

@danbromberg 8 ай бұрын

Is there a 100% Windows version (i.e., non-Linux) to do this? Love your energy!

@hacktheworld2976 11 ай бұрын

Hi! I like your videos networkchuck and i dont miss any of them. Can you make a video about how track location with phone number.

@xrellikgr 11 ай бұрын

Big shoot out to network Chuck for teaching me how to be an unethical hacker 😈

@RazoBeckett. 11 ай бұрын

Quick and sweet

@Caution1712 11 ай бұрын

An easier (and probably faster) way of extracting hash's from SAM would be to dump lsass (via something like task manager) and then parse through the dump.

@PicSta 11 ай бұрын

As you have said, you had to prepare a few things to get this “hacking method” to work. In a real world people use defaults, like RDP is not enabled, Windows Defender or any other security software is running. Means Windows is not better, worse compared to any other OS or software. All login systems use a similar way to store the needed hash value to check against the given password. All websites out there, where you sign up, the password gets stored in a DB with a hash value. What we should question, how easy it is to find out what it actually is.

@ritsux4204 11 ай бұрын

Hey Chuck can you tell us how to install PHP in kali linux in your next video? btw I'm a huge fan of your videos and love your content.

@xxstepsxx4227 11 ай бұрын

He barely touched that coffee mug, call ambulance! Chuck is sick! 😂

@TopMusicsEnglish 11 ай бұрын

Hey i have a question why dont we jus get the hash and convert to password using a converter online insted od coding it is it possible?

@goc19777 11 ай бұрын

If it's Windows 10, you can do this MUCH more easily with a cmd trick lol 😂

@aninsecurecarrot 11 ай бұрын

What trick is that? Just curious

@toumpanis 11 ай бұрын

But you left the cmd open on the way out with all the commands you've used... how he doesn't know as you said?

@astronomia0_0 11 ай бұрын

How to install every single tool that network chuck used in his videos and that probably will use in his kali linux videos: First: make sure you have at least 10GB spare on your dev (1,2,3 and all the other that you and your system created) partition (not to be confused with the HOME partition, but if you selected the all files in one partition while installing, you shouldnt have to worry about this). 2: execute SUDO APT UPDATE -Y (-y stands for automatically allowing everything, basically you won't have to type y to agree with apt using you storage while running this specific process) 3: then SUDO APT FULL-UPGRADE -Y 3.5 (optional step): execute kali-tweaks if your system don't have the metapackage group installed yet 4: after you make sure it's completely update, do SUDO APT INSTALL KALI-LINUX-DEFAULT -y 5: then SUDO APT INSTALL KALI-LINUX-EVERYTHING -Y then go touch some grass because it's probably gonna take a considerable amount of time to completely install it 6: enjoy Side note for new devs: do not execute those listed commands in capslock, do it normally, I simply wrote that way so people could diferenciate between regular text and the command itself

@bendixdavid3593 10 ай бұрын

Can I crack the Hash also on windows or do i have to use the Linux command prompt to do that?

@umutcan5111 11 ай бұрын

Myself during this Bear Market only trying to focus on BTC, *VRI TOKEN* , ETH, SOL, MATIC. not losing sight of BNB and GALA. 🇨🇦

@virajkoradia7468 11 ай бұрын

Just Loved your videos

@luts5688 2 ай бұрын

Cool. Of course, you could also use a tool on a usb drive to just delete the password.

@mysteriousgamer 11 ай бұрын

Another mitigation would be to not use your administrator account by default. By using a general user account, Chuck would not have been able to create the hash file via CMD.