In the Windows operating system, local accounts authenticate via SAM and SYSTEM files. Therefore, the security of SAM and SYSTEM files is critical. The password summaries of local accounts belonging to a Windows computer and registered in the captured SAM and SYSTEM files will be obtained with samdump2 and bkhive tools.

Samdump2 and Bkhive Tools

Copy the captured SAM and SYSTEM files to the desktop of the Kali machine with the samdump2 and bkhive tools installed.

Then we get SYSKEY from the SYSTEM file with the bkhive tool.

Finally, we obtain password summaries of local accounts with this file and the SAM file samdump2 tool.