Win 7 boot password cracking.

Address: http://hi.baidu.com/zizhuyifeng/blog/item/30c7113503a563b9d0a2d3df.html

Method 1:

1. Enter PE

2. Go to C:/Windows/system32

Change magnify.exeand cmd.exe to administrator (right-click Properties-security-advanced-owner-change current project owner to Administration ")

Change magnify.exeand cmd.exe permissions to full control of administration.

3.change magniy.exeto mangify1.exe, and change magniy.exe to magniy.exe.

4. restart Windows 7 to enter the logon page. There is a function key in the lower left. Click Enable magnifier.

Enter net user administrator (current Administrator) 1111 (changed password) and press ENTER

Method 2:

Press F8 (without stopping) at startup and select "Security Mode Display with command prompt"
A command window is displayed.
Enter the command "Net user ***** 123456/Add", and then a new "******" user password will be added to "123456 ". To add a new user (for example, the user name is abcdef and the password is 123456), enter "Net user abcdef 123456/Add ", you can use the "net localgroup administrators abcdef/Add" command to escalate a user to a user in the System Management Group "Administrators" and grant the user Super permissions.
If your system cannot enter the security mode, congratulations! Your system can enter PE. Then you can go to the Start Menu, click "run" (or press the shortcut key "Flying window" (Microsoft logo) + r) to bring up a running window. Enter cmd and press enter, and then enter the preceding command, functions are the same.

Simplest: Press CTRL + ALT + Delete on the welcome page to exit the account window, enter the username: Administrator, and press Enter. If the account also has a password, then:
Press F8 at startup
Select "security mode with command line"
Select "Administrator" and jump out of the "command prompt" window.
Add users: Net user ASD/Add
Administrator: Net localgroup administrators ASD/Add
Restart and select ASD to enter
Control Panel ---- user account ---- user who forgets the password -- delete password?
1. Forget the password, but you have logged on to the system. Click confirm to enter the console. Open "file"-"Add/delete Management Unit" in sequence, find "local users and groups" in the available management unit on the left, and click "add"-"finish" in sequence ", click OK ". Expand the local users and groups in the root node of the console, select "user", right-click the user name on the right, and click "set password". You do not need to enter the original password here.
2. You have forgotten your password and cannot log on to the system.
1. Find a PE disk and start the computer.
2. Enter PE and go to C:/Windows/system32.
(1) Change magnify.exe and cmd.exe to "Administrators ".
(2) Change magnify.exe and cmd.exe permissions to full control
(3rd) Rename magniy.exe to magniy.exe 1 rename magniy.exe .exeto magniy.exe
3. Change Password
(1) Restart to Windows 7
(2) Enable magnifiers
(3) The rest is very simple. Enter the "Net user" command to view the user name, and then enter the "Net user username and new password" command. (Activate the Administrator account to use net user administrator/active: Yes) Close the Command Prompt window and enter the new password you just set in the logon Password box to see if the system has been successfully entered! Finally, don't forget to change all the previously moved and renamed files back. This is a serious backdoor!
4. You have forgotten your password and cannot log on to the system. This situation is troublesome to handle. I have tried the security mode, fixed the Windows 7 system disk, and logged on to winpe, but I cannot modify the system file. It seems that the method of Vista is not available in the past. My method is similar to the method for modifying files by logging on to winpe. Here we need a Ubuntu installation CD. I use the 8.10 desktop version. Select the disc to start, go to the Ubuntu installation interface, select the language, and then enter the first item "Try Ubuntu without changing ......". Next, wait for the file to be loaded. It will take a little longer. after entering the desktop, open the X:/Windows/system32 folder in Windows 7, and copy the corresponding osk.exefolder to another location, rename cmd.exe "to cmdosk.exe", and restart the hard disk. In the Windows 7 logon window, click the "easy access" icon in the lower-left corner of the screen, select "Start Screen Keyboard" in the pop-up window, and click "OK". The command prompt is started. The rest is very simple. Enter the command "Net user" to view the user name, and then enter the command "Net user username and new password. Close the Command Prompt window and enter the new password you just set in the logon Password box to check whether the system has been successfully entered! Finally, don't forget to change all the previously moved and renamed files back. This is a serious backdoor.
The article you are reading comes from diyxp home http://www.diyxp.net? Tid = 17675

It seems that there is no software such as the password under DOS! There are a lot of introductions on the Internet to make it clearer.

Preparation tool, deep winpe 3.0

Enter the CMD command prompt mode and copy osk. EXE and cmd. EXE to other places.

Install Windows 7 on the Elastic Compute Service (e) disk. Modify the disk as needed and run the following command:

Copy E: | Windows | system32 | osk.exe E:
Copy E: | windowss | ystem32 | cmd.exe E:

Then, use the unlocker tool that comes with deep winpe V3.0 to delete osk. EXE (it cannot be deleted in cmd, and Windows 7 has system protection)

Then, copy cmd.exe to the System32 directory and name it osk. EXE.

Copy E: | cmd.exe E: | Windows | system32 | osk.exe

Restart the computer

On the logon page, click auxiliary tools in the lower left corner and select on-screen keyboard.

The command prompt appears. Use the net user command to change the user password. The format is as follows:

. Net user username and password

In this way, the user name and password are changed again.

"|" Is a slash.

------------------------------------------

The above method does not work. Let's look at the following. What I have tried is true.

Use a magnifier (magnify.exe ):

1. Copy the following code to notepad and rename notepad as magnify. bat.

@ Net user HJ/del Delete HJ user to avoid affecting the execution of the second line.
@ Net user HJ 123456/Add add HJ user, password 123456
@ Net localgroup administrators HJ/Add add HJ user to administrator
@ Exit

2. Download the quick batch file compilertool and open magnify.batto generate magnify.exe (this tool can convert BAT to EXE files)

3. Copy magnify.exe to the USB flash drive. Use the max dos enhanced version of the USB flash drive to start the computer. The NTFS system loads ifs and enters the doscommand input interface.

Copy C: windowssystem32magnify.exe D:-[back up the magnifier magnify.exe to the d disk]

Del C: windowssystem32magnify.exe-remove the magnifier magnify.exe]

Copy X: magnify.exe C: winodowssystem32-[X indicates the USB flash drive letter. Copy the program for adding an account to the system]

4. Restart your computer. On the login system password page, click "easy access", select a magnifier, and click OK. At this time, a HJ user will be added with a password of 123456.

5. Restart your computer. On the logon page, select HJ user and enter the computer with the 123456 password.

6. Go to system account management and delete the password of the account to be deleted.

7. Restart your computer. Do not use the old user name to log in with the password. Delete the newly added HJ user.

8. Restore the magnifier file. If you do not need a magnifier, you do not need to restore it.