Download Source Package bkhive:
This tool is designed to recover the syskey bootkey from a Windows NT/2K/XP system hive. Then we can decrypt the SAM file with the syskey and dump password hashes.
Syskey is a Windows feature that adds an additional encryption layer to the password hashes stored in the SAM database.
|
|
|
| Architecture | Package Size | Installed Size | Files |
|---|---|---|---|
| alpha | 11.3 kB | 72 kB | [list of files] |
| amd64 | 10.6 kB | 68 kB | [list of files] |
| armel | 9.7 kB | 64 kB | [list of files] |
| avr32 (unofficial port) | 10.3 kB | 64 kB | [list of files] |
| hppa | 11.6 kB | 68 kB | [list of files] |
| hurd-i386 | 10.0 kB | 64 kB | [list of files] |
| i386 | 10.0 kB | 64 kB | [list of files] |
| ia64 | 12.1 kB | 72 kB | [list of files] |
| kfreebsd-amd64 | 10.6 kB | 42 kB | [list of files] |
| kfreebsd-i386 | 10.0 kB | 38 kB | [list of files] |
| m68k (unofficial port) | 9.9 kB | 64 kB | [list of files] |
| mips | 11.6 kB | 68 kB | [list of files] |
| mipsel | 11.0 kB | 68 kB | [list of files] |
| powerpc | 11.4 kB | 68 kB | [list of files] |
| s390 | 10.9 kB | 68 kB | [list of files] |
| sparc | 10.6 kB | 68 kB | [list of files] |