Windows: Recover lost passwords from memory

Hi,

if a User is logged on and forget it’s password you can dump to lsa process and recover the password from a dump file.

Two tools are needed:

  • Microsoft’s sysinternals procdump
  • mimikatz. A tool to play with windows security. Take care when download precompiled binaries. Better get the source code from github and compile it yourself.  Its very easy

Lets start. Login as a User with administrator permissions and dump the lsass process
Continue reading Windows: Recover lost passwords from memory

Advertisment to support michlstechblog.info

Virtualbox: VM does not start after creating a snapshot. EFail (0x80004005)

Hi,

when using vhd disks or when you convert other  disk formats (vmdk, vhd)  to vdi and you create  a snapshot, the virtual machine won’t boot.

An error occurs while starting the vm:

Fehlercode: E_FAIL (0x80004005)
Component: ProgressProxy
Interface: IProgress {c20238e4-3221-4d3f-8891-81ce92d9f913}

In this case the manager for virtual medias shows an error that the parent UUID of the snapshot file does not matches the UUID of parent medium stored in the media registry c:\Users\Username\.virtualbox\VirtualBox.xml.

This can be fixed 🙂 Get the UUID of the parent disk
Continue reading Virtualbox: VM does not start after creating a snapshot. EFail (0x80004005)

My Knowledgebase for things about Linux, Windows, VMware, Electronic and so on…

Exit mobile version