Has anyone ever pulled out from this SAM that is located in "reppair" folder???
Because, I can download any file I wish from server but I couldn't think of any other usefull one besides SAM file.. So what do you think? Should I try cracking those SAM files, or is there some other better file on server which could get me admin pass or some other valuable information???
P.S. I cannot browse the hard drive.. i can only download file if I know exactly path to where it is....

it could be that a original copy of the sam file is located in the repair folder..
but mostly not, so better use pwdump to extract it into a txt file, then you can crack the password hashes

you can only use the sam file from repair if he didn't change his password since he installed his windows...

Thanks, that's exactly what I wanted to know..

use pwdump2.exe to get the hashes and crack them with lc4

WEll, that is the problem.. Like I said, I can only download/upload files, not execute them.. And since it is serve, it has no use to upload it into Startup folder

can u explain to me how u can download sam file from server without knowing administrator pass on that server ?

thanx