6

Is there a specific location where the passwords are stored ?

Are they salted ?

Improve this question

1 Answer 1

Reset to default
11

Normally this is c:\windows\system32\config\SAM The passwords can be either LANMAN or NTLM. LANMAN does not use a salt and is extremely weak. On Windows XP and earlier LANMAN hashes are enabled by default. These do not use salting and are extremely easy to crack or lookup in a rainbow table. They should be disabled so the system uses NTLM hashes (which are salted). As of Windows Vista NTLM is enabled by default.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .