Fastest, tested, mostly free password recovery software with benchmarks and review
Operational Systems → Windows NT/2000/XP password recovery
Overview of Windows NT/2000/XP password protection:
Historically, all systems of Windows NT branch had to support two user authentication schemes – the so-called LanManager (LM) hashes and NT (NTLM) hashes. The first one contains grave cryptographic flaws. The worst one is that the passwords which are longer than 7 characters aren’t cracked longer than the 7-symbols ones. Nowadays it takes just few minutes to crack a password of any length, consisting of letters of both cases, and the exhaustive search of all printablle passwords will take only couple of weeks.
The second scheme is much more secure, but usually it’s no use cracking it, as the system often stores both hashes, and all attention is paid to the LM-hash.
Windows NT/2000/XP crypto algorithms: proprietary (LM) / MD4 (NT) Windows NT/2000/XP encryption weakness: human factor, weak hashing algorithm Possible attacks against Windows NT/2000/XP: exhaustive key search / brute force, dictionary Attacks complexity: 243(LM) / 2103(NT)
Description: A GUI utility, imports hashes from local machine (memory or Registry; SYSKEY supported), remote machine (AD is supported), binary Registry files (SAM, SYSTEM), dump files. Brute-force and
dictionary attacks on LM and NTLM password hashes are effectively optimized for speed; also includes a "rainbow" attack based on pre-computed hash tables that allow to find most passwords in minutes instead of days or weeks.
Description: The Saminside program is designated to recover Windows NT/2000/XP/2003 users' passwords. Could import password hashes from SAM file, local machine memory, from PWDUMP file (SYSKEY supported). Includes all standard attacks plus rainbow (pre-calculated tables) attack.
Description: Cain & Abel is primarily a password recovery tool for most types of password Microsoft Operating Systems. It also supports a lot of other applications and hashes, includes sniffers and password dumpers.
Description: Main purpose of LCP program is user account passwords auditing and recovery in Windows NT/2000/XP/2003. Could import hashes from local and remote computer, SAM, PWDUMP file.
Description: A GUI program to recover all types of Windows passwords: logon password (when user is logged on and has Admin privileges), screensaver password, .NET Passport password, RAS and dial-up passwords, passwords to shared resources, SYSKEY startup password, passwords stored in cached credentials, Wireless (WEP and WPA-PSK) encryption keys etc. The program also shows all users and groups (with their properties), allows to run any programs in other user"s context, show password
history hashes, read password hashes from SAM and SYSTEM files, read Protected Storage records, decrypt Windows scripts, reveal passwords hidden under the asterisks, enable disabled controls, and run brute-force and dictionary attacks on PWL files (Windows 9x). Finally, it shows product IDs and CD keys for Windows, Microsoft Office and other Microsoft software installed.
Description: A Windows logon password cracker based on the faster time-memory trade-off using rainbow tables. It can recover 99.9% of alphanumeric passwords in few seconds. Imports hashes from local or remote computer, SAM file and PWDUMP.
Description: Are you locked out of your computer because your password isn't working, or because somebody messed up your access rights/privileges? Forgot the Administrator's password? Elcomsoft System Recovery (ESR) makes it simple to gain access to your PC again, without formatting and reinstalling the system.
ESR is a special boot disk that works on all PCs. Simply reboot your computer with the ESR CD or USB flash drive, and fix all of your access pro
Description: High-performance distributed password recovery for forensic and government agencies, password recovery and data recovery services and corporations. Recover the most complex passwords and strong encryption keys in realistic timeframes. Accelerate the recovery by offloading calculations to NVIDIA GPUs and scale to over 10,000 workstations with zero scalability overhead.