T
tweez
Kita ko lng sa YT hehehehe.....
To grab password hashes from the Windows registry, you can follow these steps:
To grab password hashes from the Windows registry, you can follow these steps:
- Open the Registry Editor by searching for "regedit" in the Windows search bar.
- Navigate to the following registry keys:
- HKEY_LOCAL_MACHINE\SAM
- HKEY_LOCAL_MACHINE\SYSTEM
- Right-click on each key and select "Export" to save them as .reg files. Alternatively, you can use the command line to save the keys:
Code:reg.exe save HKLM\SAM MySam reg.exe save HKLM\SYSTEM MySys
- The exported .reg files will contain the local user hashes stored in the SAM file. These hashes are not in plaintext but can be extracted using hex scripts or specialized tools.