Blog | G5 Cyber Security

Windows 10 Passwords Blank in Ophcrack/ONTP&RE – Fix

G5 Cyber Security

TL;DR

Ophcrack and ONTP&RE often show blank passwords for Windows 10 due to changes in how Windows stores password hashes. This guide explains how to fix this by using a current hashpack, ensuring you’re running the tools with administrator privileges, and verifying your VM settings if applicable.

Fixing Blank Passwords in Ophcrack/ONTP&RE

  1. Update Your Hashpack: This is the most common cause. Windows 10 uses newer password hashing algorithms than older versions of Windows. You need a hashpack that includes these hashes.
    • Ophcrack: Download the latest hashpacks from the Ophcrack website. Place them in the correct directory (usually C:Program FilesOphcrackhashdb).
    • ONTP&RE: ONTP&RE also requires updated hashpacks. Download from a reliable source and place them in the appropriate folder within your ONTP&RE installation directory. The exact location varies depending on your version, but look for a ‘hashes’ or similar folder.
  2. Run as Administrator: Both Ophcrack and ONTP&RE need administrator privileges to access the SAM database correctly.
    • Right-click the application icon (Ophcrack or ONTP&RE executable).
    • Select “Run as administrator”.
  3. Verify VM Settings (If Running in a Virtual Machine): If you’re running Ophcrack/ONTP&RE inside a virtual machine (VM), ensure the VM is configured to access the physical hard drive directly.
    • VirtualBox: In VirtualBox settings, go to Storage. Make sure your Windows 10 installation disk is set as “Direct Access” or similar, not just a read-only image.
    • VMware: Similar configuration in VMware’s virtual hardware settings. Ensure the VM has direct access to the physical disks containing the SAM database.
  4. Check System File Integrity (Less Common): Corrupted system files can sometimes interfere with password extraction.
    1. Open Command Prompt as Administrator.
    2. Run the System File Checker: 
      sfc /scannow

      This will scan and attempt to repair corrupted system files.

  5. Disable BitLocker (If Enabled): If BitLocker is enabled on the Windows 10 drive, it can prevent access to the SAM database.
    • Temporarily disable BitLocker before running Ophcrack/ONTP&RE. Remember to re-enable it afterward for security reasons.
  6. Consider Alternative Tools: If you continue to have issues, explore other password recovery tools like Hashcat or John the Ripper. These often offer more advanced features and support a wider range of hashing algorithms.
Exit mobile version