It also assumes that you understand how to use third party tools like podium or fudged (http://WV. Focus. Net/fizzing/) to dump the SAM of a Windows system, Backpack and the backpack Lived are available for free at the backpack project page (http://backpack. Surefooted.
Net/). Formatting Help Backpack rainbow tables are available at backpack rainbow tables page (http:// backpack. Surefooted. Net/tables. PH).
The XP free (/p/backpack 1 OFF rainbow tables are sold by Objectify Securities. /wick/markdown_syntax/ This step is optional but will speed up the cracking process.Run backpack and set the number of threads under the Preferences tab to the number of cores of the computer running backpack plus one. For example, for an old processor set the number of threads to 2, for a Core 2 Duo to 3 and for a Core 2 Quad to 5.
If you change this value, you have to exit backpack and to restart it in order to save the change. If you don't exit and restart, the new number of threads will not be taken into account by the program. This step is mandatory. Load hashes using the Load button.You can either enter the hash manually (Single hash option), import a text file containing hashes you created with podium, fudged or similar third party tools (PODIUM file option), extract the hashes from the SYSTEM ND SAM files (Encrypted SAM option), dump the SAM from the computer backpack is running on (Local SAM option) or dump the SAM from a remote computer (Remote SAM option). For the Encrypted SAM option, the SAM is located under the Windows system's/ confining directory and can only be accessed for a Windows partition that is NOT running.
For the Local SAM and Remote SAM options, you MUST logged in with the administrator rights on the computer you want to dump the SAM. This step is optional but will speed up the cracking process. Delete with the Delete button every user account you are not interested in (for example the Guest account). You can use the CTR key to make multiple selection. CTR-a will select every loaded hash. Keep in mind that the time needed to crack password hashes with rainbow tables is proportional to the number of hashes loaded.
With a brute force attack the cracking time is NOT dependent on the number of unsalted hashes loaded. That's why it's advisable to remove any unnecessary user account with the Delete button. Install (Tables button), enable (green and yellow buttons) and sort wisely (up and down arrows) the rainbow tables your are going to use. Keep in mind that storing the inbox tables on a fast medium like a hard disk will significantly speed up the cracking process.
