Dear [EMAIL PROTECTED],
Best regards,
Arjun mailto:[EMAIL PROTECTED]
����������������������������������������������������
This is a forwarded message
From: Tarun Anand <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Date: Monday, March 3, 2003, 12:28:00 PM
Subject: FW: [ilugd]: can gnuLinux break into winXP password flaw?
===8<==============Original message text===============
FYI...
-----Original Message-----
From: Raj Chaudhuri
Sent: Friday, February 28, 2003 1:32 PM
To: Tarun Anand
Subject: RE: [ilugd]: can gnuLinux break into winXP password flaw?
Yup. Here we go:-
1) The boot floppy trick mentioned by Arjun below can be used to root
any Linux installation as well. It's easier in fact.
2) The Windows 2000 recovery console trick mentioned in the orginal
mail allows users to ONLY SEE a DIR list. Period. No registry access.
No SAM access. No copying using COPY or XCOPY even. No changing text
files to remove passwords and stuff. See Unix !
http://www.securityfocus.com/columnists/144
3) The Linux boot floppy does have utilities to change the SAM, add
accounts, etc. However, if the XP machine were a member of a domain,
and if the files on an XP disk were protected by EFS, then the happy
hacker would not be able to view them. This is true even if you
grabbed the hard disk.
-----Original Message-----
From: Arjun [mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 25, 2003 3:20 PM
To: Tarun Anand
Subject: Fwd: [ilugd]: can gnuLinux break into winXP password flaw?
Dear Tarun,
For your info.
Knoppix can break in as well :) with full write access.
Knoppix is a Linux distribution which runs off a CD and doesn't
require installation.
Its a great recovery tool. Also works on NT and 2000.
Also read HT TECH 4U, page 20, 24 Feb 2003.
for a free (GPL) copy of Knoppix download from knopper.net or write to me.
There is also a WinNT Password Recovery CD. Try this string in
google.
Best regards,
Arjun
mailto:[EMAIL PROTECTED]
����������������������������������������������������
This is a forwarded message
To: Indian Linux User's Group-Delhi <[EMAIL PROTECTED]>
Date: Thursday, February 20, 2003, 7:54:48 PM
Subject: [ilugd]: can gnuLinux break into winXP password flaw?
===8<==============Original message text===============
have been reading about a reported flaw in winxp password feature. basically,
according to reports, boot from a win2k cd, enter the recovery console, and
voila! the whole hard disk of winxp, including user accounts and user data is
naked and wide-open, like adam&eve without the gravity-defying fig leaves.
so the question: can a similar access be granted if i chose to boot up from a
knoppix or a gnulinux recovery disk, such as from redhat or other distros?
anybody tried this? this would be quite interesting. and i do need to know
this urgently. your responses welcome.
:-)
LL
================================================ To unsubscribe, send email to
[EMAIL PROTECTED] with unsubscribe in subject header. Check archives at
http://www.mail-archive.com/ilugd%40wpaa.org
===8<===========End of original message text===========
===8<===========End of original message text===========
================================================
To unsubscribe, send email to [EMAIL PROTECTED] with unsubscribe in subject header.
Check archives at http://www.mail-archive.com/ilugd%40wpaa.org
