NAME

       samdump2 - retrieves syskey and extract hashes from Windows 2k/NT/XP/Vista SAM.

SYNOPSIS

       samdump2 [OPTIONS] SYSTEM_FILE SAM_FILE

DESCRIPTION

       samdump2  is  designed to dump Windows 2k/NT/XP password hashes from a SAM file, using the
       syskey bootkey from the system hive.

       -d     enable debugging

       -h     display this help

       -o file
              write output to file

EXAMPLE

       samdump2            -o            out             /mnt/ntfs/WINDOWS/system32/config/system
       /mnt/ntfs/WINDOWS/system32/config/sam

AUTHOR

       This  manual  page  was written by Adam Cecile <gandalf@le-vert.net> for the Debian system
       (but may be used by others) and modified by Objectif Securite  <info@objectif-securite.ch>
       Permission  is  granted to copy, distribute and/or modify this document under the terms of
       the GNU General Public License, Version 2 or any  later  version  published  by  the  Free
       Software Foundation On Debian systems, the complete text of the GNU General Public License
       can be found in /usr/share/common-licenses/GPL-2.

SEE ALSO

       ophcrack(1)