Stealing Computer Passwords on Login

[@Apple_Beshy]

The first "hack" I've ever did was in my middle school, one of my friend forgot to erase his password from facebook log in, and I literally just swap the password into text using inspect element and got his full password 😆

[@fightme5543]

Corson Hardwick?

[@wrathofainz]

​@@fightme5543Corsair Vengeance ® RGB 32gb

[@scorit-zq4yx]

I started with Social Engineering in grade 8 back in the early 2000s when MSN was popular. Slowly get the answers to peoples secret questions to reset their passwords. The last day of school I had access to my entire classes MSN accounts. Good times.

[@Sudowhoami-ni1td]

lol in Highschool I installed a keylogger on my own phone and convinced shitload of students to login into their fb accounts to show them some bs cool feature fb have on my phone which I completely made up

[@Itsameemario]

@@scorit-zq4yx i beat you both. try ICQ on dial up built in search in ICQ and targetted gay predators, and also stole ISP dial info so tracing me would bounce all over pwn you both

[@KeithGriffiths]

...John, you provide so many links to really useful resources. I have built out most of the projects from videos you have created...and started running out of space, my 42u rack server is busting, I just keep on adding to it... 😂😂

[@logiciananimal]

Microsoft does seem to not care about this sort of thing very much - they consider local administrator to be sufficiently powerful that abuse of other users or of SYSTEM to be always possible. (This was generally Raymond Chen's attitude for a while.)

[@davidyoder5890]

How is this any different than the root user in Linux or MacOS?

[@nou712]

@@davidyoder5890 In most desktop linux configurations the root account is locked by default and you have to use a live usb/dvd/cd environment to chroot and unlock the root account or edit your boot entry on startup in grub to use /usr/bin/bash. You have sudo which can do super user things, up to a limit though set by the distribution that packages sudo for you(unless you can do sudo su - root) and it depends again how your system is configured. You can remove your own sudo privileges meaning your system is very locked down however this also means you can't do even basic things such as installing new software unless you use something like flatpak or distrobox in userspace.

[@chri-k]

@@davidyoder5890The difference is that administrator accounts are supposed to be (and if you configure sudo correctly, are) one level below root

[@tablettablete186]

@@davidyoder5890 Tbh, Linux has Mandatory Access Control, which can restrict root processes

[@Aura_Mancer]

​@@davidyoder5890 Because you don't operate in root. In Linux (and afaik MacOS) you always use a "local" account, and you only elevate yourself for an operation (macos has its system, on linux it's sudo or doas for commandline, and polkit for gui), *with authrntication needed* in contrast to Windows "yes or no" prompt that MS itself has said it's not a security feature (in some blogs of theirs). On linux, if you used the root user all the time, bad things would happen, and it is very discouraged.

[@akshaychoudhary3582]

Hi john can you also add the link of the blog post that you refer. It'll be very helpful ❤

[@debrainwasher]

This is really an insightful and heart warming contribution.

[@DePhoegonIsle]

I am more curious about how you would interact with this and an account that uses Windows Hello sign-in, or Pin Sign in. I must say it is interesting to see the password logins be ... taken apart, but I am almost more upset that there is some pathological avoidance of pushing against MS Logins with pins/Windows Hello auth.

[@lunaxyzi]

Very important question: What KEYBOARD do you use?

[@Chrysilla_QuantumHealing]

I am not very technical, but enjoy your videos and enthusiasm. 😊

[@mkledits3679]

John great video as always! Quick question; will this work also on Microsoft accounts? since winlogon process handles the authentication in both cases?

[@charleshines2142]

Windows is just a security nightmare from the looks of this. First I find out about Recall the biggest security risk that NO ONE asked for and now this.

[@deanvangreunen6457]

Wait till you learn about ligma

[@gtair1520]

@@deanvangreunen6457 oh no

[@SpaceCadet4Jesus]

A couple security softwares do monitor login process and would make this technique null and void. But I gave you a thumbs up anyways.

[@shenetworks]

JOHN WHY ARE YOU YELLING

[@deanvangreunen6457]

It's for the blind people at the front of the room. 😂

[@deanvangreunen6457]

He's FBI agent is a little "slow"

[@deanvangreunen6457]

He's talking load so an Indian hacker can hear him cause he's mic is bugged by Indian government 😂

[@abdalrahman0x80]

why are you watch this video? you: Any Comment

[@poocyx]

great video john!

[@pidojaspdpaidipashdisao572]

Hey if the method is hot, it's always worth making a video on it. :)

[@ricseeds4835]

I want to try this just to find out if it still works when the user is already logged in but locked. Also, how does it work if the user mistypes the password on the first try?

[@BishnuGhimire-u2z]

Jai Shree Radhe Radhe 🙏🙏

[@BishnuGhimire-u2z]

Jai Shree Radhe Radhe 🙏🙏😍😍😍🇳🇵♥️👌👍💐🙏

[@tanjianhong2589]

My first "hack" that I did it using the net user command to change my password in cmd while not logging in lol. It was on Windows 7, I forgot how I managed to open the cmd, but I did.

[@SayanKhan_3]

Very informative sir .... 😊

[@hollywoodhank591]

His Video is 21 Minuten long... and 13 Minutes up. 3 minutes after its up, you commenting this 🤔

[@Mohammad-zg4jd]

​@@hollywoodhank591❤😂😂⁰

[@Vortex.vx-c5d7]

I just need the password so i can save the important files and remove the bloatware/using a modified iso

[@comosaycomosah]

been trying to remember dudes last name for like 2 years lmao thanks

[@kongpanha1816]

Hi John 🎉

[@saimanish4374]

Brilliant 🤩

[@harrylumsdon6773]

Wont any xdr report any lsass acccess or calls?

[@ravenhoodcat9421]

Soooo basically, you need to already have the keys to the kingdom in order to get the keys to the kingdom.

[@snowysysadmin59]

This is more of a pentest thing. Wouldnt be practical in a real blackhat scenario

[@0xgordo350]

@@snowysysadmin59 I think you can go from local admin to domain admin with this technique

[@gunnargu]

linux can do this too, just put a PAM into PAM...

[@mastersingleton]

Thanks for another informative cyber security video for Windows 10/Windows 11 PC users.

[@balloney2175]

Yesss! I'm gonna ask my g.f. to login to my laptop and then I'll be able to discover secrets she'd been keeping.

[@kaiosama1237]

Maybe don’t say it here? Lol 😂

[@balloney2175]

@@kaiosama1237 She didn't know my alias on KZbin.

[@SpaceCadet4Jesus]

You mean you'll get your girlfriend's secret passwords when she uses the browser? You think.

[@Cotten-]

*_If you don't trust her then save yourself the trouble and just break up. It seems like you are looking for bad behavior from her to justify your own bad behavior._*

[@abenezerkassa111]

big fan bro

[@johnnywilliams2641]

The legend with the golden hair.

[@CRSolarice]

Wow, what an amazing thumbnail! It makes you look like the handsome red headed man that you really are. Be careful about accepting too many date requests online because you may run out of time to make videos!!! I have the thought that you are much more intelligent than you are leading people to believe! Nevertheless I am really amazed! Is this just a fluke?? Best regards.

[@mirozo]

does it work with login on domain users?

[@mirozo]

like if i wanna grub domain admins2 password but only have domain admin1 and local admin1

[@rochdiferjani6778]

@@mirozo it s working fine, enjoy !!!

[@carsonjamesiv2512]

COOL!

[@anonymous-65732]

nice sir

[@skitties_the_folf6969]

thanks for more than enough info to add securities to my computer

[@BG5850]

Hey I followed along your video from 4 years ago with the Rick and Morty ctf. I had a few questions toward the very end. Is there away we can connect?

[@mountp1391]

good

[@𠀖̈̇̃𠀖]

hi

[@BouzianiYassine]

Hey bro can you give me help to recover my account Gmail pleaseeee

[@chmod_]

Use middle finger on keyboard 😅

[@iamwitchergeraltofrivia9670]

Hahahahahjajahajajajajjajaja linux permissins are the best

[@CapnCrunk]

Stop filming your hands/keyboard while talking. I hope the pin you logged in with isn't used anywhere else.

[@Denvercoder]

You’re a 🤡.

[@trusttech9942]

🤦🏻

[@mariosphilippou7283]

smartest windows user

[@brynleecunningham123]

I just use the same typing montage every time i’m typing a password. i’m actually typing “I heart butt cheese” in the clip

[@txic.4818]

most intelligent windows user

[@atikhossaindip]

--comment

[@sammycy5016]

Sir can you hack clash of clans account? I can't access my account even though I have my Gmail but need a unlock code please help

[@limhanliang]

😮😮

[@mahiwells819]

I need your help it's urgent sos

[@activetutorial]

scam

[@KCKingcollin]

The title should be "stealing windows passwords" Linux doesn't have these issues unless you somehow get root, and you'd need a 0 day or social engineering attack for that

[@0xgordo350]

Yeah it does, it's called PAM Backdoor

[@tablettablete186]

Far as I know, you can trivially steal passwords in Linux if you are using X11

[@abenezerkassa111]

first lol