chntpw: Offline NT Password & Registry Editor | Algo de Linux

martes, 24 de marzo de 2015

chntpw: Offline NT Password & Registry Editor

chntpw es una herramienta que nos servirá para resetear la password de usuarios Windows, desbloquear cuentas y promocionar usuarios.

Podemos instalar chntpw desde los repositorios de Debian para utilizarla en máquinas con Linux y Windows. La versión de los repositorios de Debian es la 0.99. Si queréis la versión 1.0, podéis descargarla desde repositorios alternativos:
Si ejecutáis chntpw, podéis ver los diferentes parámetros disponibles:
# chntpw 
chntpw version 1.00 140201, (c) Petter N Hagen
chntpw: change password of a user in a Windows SAM file,
or invoke registry editor. Should handle both 32 and 64 bit windows and
all version from NT3.x to Win8.1
chntpw [OPTIONS]  [systemfile] [securityfile] [otherreghive] [...]
 -h          This message
 -u Username or RID (0x3e9 for example) to interactively edit
 -l          list all users in SAM file and exit
 -i          Interactive Menu system
 -e          Registry editor. Now with full write support!
 -d          Enter buffer debugger instead (hex editor), 
 -v          Be a little more verbose (for debuging)
 -L          For scripts, write names of changed files to /tmp/changed
 -N          No allocation mode. Only same length overwrites possible (very safe mode)
 -E          No expand mode, do not expand hive file (safe mode)

Usernames can be given as name or RID (in hex with 0x first)

See readme file on how to get to the registry files, and what they are.
Source/binary freely distributable under GPL v2 license. See README for details.
NOTE: This program is somewhat hackish! You are on your own!
Y si queréis descargarlo para CD o USB:
  • cd140201.zip (~18MB) – Bootable CD image. (md5sum: f274127bf8be9a7ed48b563fd951ae9e)
  • usb140201.zip (~18MB) – Files for USB install (md5sum: a60dbb91016d93ec5f11e64650394afb)
Publicado por primera vez en http://enavas.blogspot.com.es