Where Does Windows Xp Store Its Passwords ?

[jenderalmabuk]

Is thre a file where password information is kept in windows XP? If so what is it's name and where is it located?

 

[Hazirak]

I'm not sure where Windows stores its PWL files, but I'm almost positive it doesn't matter anyways since a quick Google search shows they're encrypted.

All records along with user name and checksum are encrypted with strong cipher algorithm RC4.

 

[port5900]

depends on which ones your looking for

 

[sunils]

Why you want it?

 

[supajason]

http://en.wikipedia.org/wiki/Security_Accounts_Manager

 

[iholla]

I am not sure why you need this info but anyways, I hope this will give you an idea where to start. Where to look;

%systemroot%\system32\config\SAM
%systemroot%\system32\config\SYSTEM

You should know however that the files you are interested in are not directly readable. The last time I was interested in this area, xp was using a destructive algorithm MD4 to create a hash of the passwords before storing them.

There are a number of tools available on the web that can help you with that...but your post wasnt about that was it? So, Ill leave it at that.

Good luck!!

 

[jenderalmabuk]

Thanks So Much Guys. this a home work for my school. now I know more About Windows.

 

[sunils]

Thanks So Much Guys. this a home work for my school. now I know more About Windows.

Man nice way to do the homework.

 

[Dan]

Is that the User passwords that are stored there or passwords for other things?

 

[animerth]

well the SAM file has the LM and NT hashes of the passwords and then can be cracked

the local security authority subsystem service AKA LSASS.EXE is the handler of passwords for accounts *very insecure*

Protected Storage is also manged by LSASS.EXE it is a storage for password and usernames the KDE ver would be known as KWallet
In Protected Storage you can find outlook passwords, stored Internet explorer passwords, dial-up paswords , and most "auto fill" things

The data can be accessed by DLL injection or running a process as the SYSTEM account ( the SYSTEM account is fun to play with )

Many programs use it as a POC such programs as Cain and Abel

 

[rlodge]

Man nice way to do the homework.

That's no lie!:drool:

 

[sunils]

That's no lie!:drool:

just kidding....

But you should not do any thing with those files. deleting the files will cause your user accounts to be deleted. So play it safe.