how to view existing password applied to user accounts in windows.docx

How to view existing password applied to user accounts in windows?

Requirements

1. Hash dumping software's like fgdump.

Note

Administrative privileges are required to extract dump from windows and extracted password will be in the form of a hash which needs to be cracked.

Let’s start

Download the fgdump software from the link. Just extract the software anywhere you want. Open the software with administrative privileges. The password dumping process will begin.

If password dumped successfully then it will stored in .pwdump file.

Open this file in notepad or any text editor

Administrator:500:B0347EB22B87E3F1AAD3B435B51404EE: 8846F7EAEE8FB117AD06BDD830B7586C:::

The dump will look like this in which “Administrator” is the username and after the third column it is the password in the NTML hash. This hash can break using many ways but for now we will use a very convenient way. It may give results in seconds. To break the hash just look for any online hash cracking service like Hashkiller.co.uk.

Just enter the hash and see the magic.