Your Windows 11 Password is NOT safe... #endermanch #windows #microsoft

​@@Lofotewhile it is saved as a hash, it is an unsalted md4 hash which means you can just run it through a rainbow table (aka a hash database as he calls it) to get the original password

@@mortn_yt and have the same full acces if you login as root. Exactly same thing

@@hyperkiko good point, but to my understanding, this is about the security questions, not getting the original passwordd, which should be saved as a hash only. Or do you mean something else?

@TheRealMangoDev you see, if you leave your safe open, you cant blame the manufacturer when stuff is stolen from it.

@TheRealMangoDev  everything is vulnerable when you login as admin. If someone has root access there is no protection barrier anymote, it is vulnerable to everything

And..? Its still vulnerable.

Or you can use linux

@@Lofote you can change C:/system32 sethc to cmd.exe

@@SketchyB_YT How? (Just to clarify: I am talking about a well configured system, with user having no admin rights, a good admin password and BitLocker against offline attacks for example via USB stick (which requires physical access however).

@@gmddolbaeb2191 yep! Can even automate it by creating your own WinPE bootable environment with a custom program that runs the cracker. The entire registry is stored as reg.dat so it really is as simple as finding that file.

No, but he doesn’t have to be a local admin for that to happen. Hackers can do that easily.

@Lofote Lookup the Dunning Kruger effect

@@gmddolbaeb2191 Thats why on a secure system BitLocker (or similar) is required, if you also want to block people that have physical access to the machine. If you can hinder people from physically access (or access via IPMI), e.g. servers in a locked down room, you can skip that.

USB from bootable media command prompt

​@@Lofote this is if you already have access but want to know the users password, most people use the same password for a lot of services so it would be helpful to know their password so you can try it on other services

thats not the point, the point is you can get the original password, setting it to something else never gives you the original password. Also you could just boot on a usb drive instead to get the sam file or use the recovery bug if its windows 10 1907 or earlier​@@Lofote

@@guilhermemestre4 Yes, I understand that, but the security flaw is already there then. The thing is (the major rule, how Microsoft security is implemented): if someone or something has admin rights, it can do whatever it want. There is no security anymore then. This is the same on Linux: if you run something as root, you are "inside", there is nothing the operating system will prevent then. :)

@Lofote in the last enderman video, he explained how to access these reg files. you need a specific account in addition to the administrator one. but some third-party services have these privileges, that's the problem. if I'm not mistaken, he explains this in the previous video

@@txicatedbeast386The problem is you need some bug in Windows (which security updates patch out) or admin access for this.

​@@txicatedbeast386still need admin

I guess you'll are the ones who don't know the risk getting NT Authority elevated CMD is as easy pancakes.😅

Once you have a CMD with full power, aka NT authority system power, then you can easily get access to these keys (in theory).

@@276- 😁

change the profile picture. NOW!! ⚡️🌩️

wow never thought anyone would see the gojek driver 😂

@@Fauxed nah, i though i was mistake when saw the gojek driver

The way passwords work in recent years is it goes through an irreversible algorithm, then the result is stored. Anytime a password needs to be compared, it gets put through the same algorithm and the result is compared, so only you know your password. The problem is when that algorithm isnt one way, then people can get your original password from the hash.

it's not true in all languages it's Enderman (becaus it's a minecraft mob)

@@pronounjow Oh my bad lol I fixed it

At least spell "security" correctly...

@@256odeon well Linux user is so lows that hacker don't wasted their time for small fish

@@256odeon in Linux mint the passwords are salted. So it's way more different to get them.

@@CookieXD1998 so he is safer from a windows exploit in linux? 😂😂

Obviously not (being completely safe is impossible, you are safer.)

??????? obviously yeah

@@stysan i am disaapoimted in the microsft

yes