Elcomsoft System Recovery

在所有Windows版本中将密码重置为本地Windows帐户和Microsoft帐户。 为任何用户帐户分配管理权限,重置过期密码或导出密码哈希以进行脱机恢复。 提供可启动的Windows PE环境。

  • 重置Windows帐户的密码
  • 从SAM / SYSTEM文件或Active Directory数据库转储哈希密码以进行脱机密码恢复
  • 恢复本地帐户和Microsoft帐户密码
  • 定制的Windows PE环境,具有广泛的硬件兼容性和真正的原生FAT和NTFS支持

支持:Windows 7,8,8.1,Windows 10; Windows Vista,Windows XP,Windows 2000,Windows NT; 所有相关的Windows Server版本; 32位和64位系统; Windows PE具有32位和64位UEFI和传统BIOS配置; 熟悉的Windows 界面; SAM / SYSTEM和Active Directory

Standard Edition $ 99
Professional Edition $ 299
购买

Improved Full-Disk Encryption Workflow

Elcomsoft System Recovery makes it easier to access data stored in encrypted disks and containers. With automatic detection of encrypted volumes, ESR will automatically extract hashes required to launch an attack[1] on the password of the encrypted volume, saving them to the flash drive to offer faster access to encrypted evidence compared to the traditional workflow. In addition, ESR can extract and save hibernation files that may contain the encryption keys to access information stored in encrypted volumes. These keys can be used to instantly mount encrypted volumes or decrypt their content for offline analysis[2].

Reset or Recover Windows Account Passwords

Up to 40% of support calls are related to forgotten passwords and locked logins. Elcomsoft System Recovery helps instantly reset Windows system passwords, enabling system administrators regain access to locked Windows accounts. Supporting local Windows accounts, network domains and Microsoft Account, Elcomsoft System Recovery is a must-have tool for network administrators, IT professionals and security specialists.

Reset or Recover SYSKEY Passwords

SYSKEY passwords were a dubious and controversial way to add an extra layer of security to Windows login. Used in older versions of Windows, SYSKEY passwords were removed from Windows 10 and Windows Server 2016 release 1709. An unknown SYSKEY password blocks Windows startup and prevents the ability to recover or reset the user's account password.

Elcomsoft System Recovery can reset SYSKEY passwords in order to restore the system’s normal boot operation. Before resetting a SYSKEY password, ESR will now check whether this operation is safe for the system.

In addition, Elcomsoft System Recovery allows looking up for cached SYSKEY passwords in various system databases and cache files before resetting.

Instant Reset and Configurable Attacks

Elcomsoft System Recovery can reset account passwords instantly, while supporting pre-configured attacks to recover the original passwords. In addition, users can upload their own custom dictionaries for high-performance dictionary attacks with up to 4 levels of mutations.

Elcomsoft System Recovery unlocks locked and disabled user and administrative accounts in Windows 7, 8, 8.1, Windows 10, as well as many legacy versions of Windows including Windows Vista, Windows XP, Windows 2000, Windows NT as well as the corresponding Server versions up to and including Windows Server 2019. Both 32-bit and 64-bit systems are supported.

Ready to Boot, Immediate Assistance, Easy to Operate

Elcomsoft System Recovery comes with everything to quickly create a bootable DVD or USB flash drive. The image is based on a customized Windows PE environment, and comes pre-configured with a number of drivers to allow seamless experience on most legacy and cutting-edge hardware configurations.

Create a bootable USB drive or DVD disc in a few easy steps for immediate assistance. Elcomsoft System Recovery comes with 32-bit and 64-bit UEFI and legacy BIOS configurations, allowing you to create bootable media for all types of systems.

The genuine Windows PE environment offers complete access to the familiar Windows graphical user interface. No command line scripts and no poor imitations of the Windows GUI!

Case Studies

Elcomsoft System Recovery is an all-in-one security tool for Windows accounts. The tool helps detect and resolve a variety of issues related to user and administrative account passwords.

  • Assign Administrator privileges to any user account
  • Enable and unlock the locked and disabled user accounts
  • Change and reset passwords for any local accounts
  • List all local user accounts and highlight Administrator accounts
  • Look up account privileges
  • Detect accounts with empty passwords
  • Instantly recover certain passwords to special/system accounts (e.g. IUSR_, HelpAssistant, etc)
  • Backup and restore SAM/SYSTEM files
  • Optionally restore original SAM/SYSTEM files after successful logon with a new password

  1. Elcomsoft Distributed Password Recovery is required to recover passwords to encrypted containers. 

  2. Elcomsoft Forensic Disk Decryptor is required to search for encryption keys, mount and/or decrypt encrypted volumes. 

Compatibility Chart

There are two versions of ESR: Standard and Professional

ESR Std ESR Pro
Windows versions support
Supports Windows XP/Vista/7, Windows 8/8.1, Windows 10
Supports Windows NT/2000/XP workstations
Supports Windows NT/2000/2003/2008/2012 servers -
Creates bootable media for 32-bit и 64-bit BIOS
Creates bootable media for 32-bit и 64-bit UEFI
Supports Windows 8/8.1/10 Live! (Microsoft) accounts
General features
Based on Windows PE
Multilingual user interface
Supports all RAID/SCSI/SATA devices
Automatic mode (list of installed systems)
Manual mode (browse for Registry files) -
Create bootable CD
Create bootable USB flash drive
Reset local Administrator password
Backup/restore SAM
Enable/unlock Administrator account
Advanced features
Reset password to other user accounts
Highlight accounts with Administrator rights
Look up account privileges -
Enable/unlock disabled/locked accounts
Give Administrator privileges to any user account -
Recover passwords for some system accounts -
Reset Domain Administrator password -
Reset AD users password -
Dump password hashes for local accounts
Dump password hashes for AD accounts -
Backup/restore NTDS.DIT -
Show LM/NTLM hashes -
Show password history hashes -
Test short and simple passwords
SAM database editor -
Reset SYSKEY security -
Look up SYSKEY passwords -
License, maintenance, delivery
Instant download
One year of free updates
Licensed for business use

系统需求

Windows

  • Windows 10/8.1/8/7/Vista/XP/2000 (32 bit and 64 bit; all editions)
  • Windows Server 2019/2016/2008/2003

产品版本信息

Elcomsoft System Recovery v.6.0.402

  • аdded an option to detect full disk encryption, extract and save password hashes for further recovery
  • аdded an option to copy hiberfil.sys to the flash drive (for further extraction of decryption keys)
  • аdded support for latest Windows 10 builds
  • аdded support for Windows Server 2019
  • аdded support for user-defined dictionaries (wordlists), with mutations
  • аdded the feature to search for SYSKEY passwords (in addition to just reset)
  • improved logic when saving password hashes into UNICODE or ASCII file
  • improved logic on SYSKEY password reset (now 100% safe)
  • fixed the problem with Domain Administrator password reset on some configurations
  • fixed the problem on password recovery for some legacy systems
  • fixed the problem booting from slow USB flash drives
  • small bug fixes, performance and UI improvements

可以使用标准Microsoft Windows工具删除所有程序 – 还可以通过控制面板或在“开始”菜单中使用“ Uninstall ”快捷方式

系统需求

Windows

  • Windows 10/8.1/8/7/Vista/XP/2000 (32 bit and 64 bit; all editions)
  • Windows Server 2019/2016/2008/2003

产品版本信息

Elcomsoft System Recovery v.6.0.402

  • аdded an option to detect full disk encryption, extract and save password hashes for further recovery
  • аdded an option to copy hiberfil.sys to the flash drive (for further extraction of decryption keys)
  • аdded support for latest Windows 10 builds
  • аdded support for Windows Server 2019
  • аdded support for user-defined dictionaries (wordlists), with mutations
  • аdded the feature to search for SYSKEY passwords (in addition to just reset)
  • improved logic when saving password hashes into UNICODE or ASCII file
  • improved logic on SYSKEY password reset (now 100% safe)
  • fixed the problem with Domain Administrator password reset on some configurations
  • fixed the problem on password recovery for some legacy systems
  • fixed the problem booting from slow USB flash drives
  • small bug fixes, performance and UI improvements

可以使用标准Microsoft Windows工具删除所有程序 – 还可以通过控制面板或在“开始”菜单中使用“ Uninstall ”快捷方式

买Elcomsoft System Recovery

Standard Edition
$ 99
Professional Edition
$ 299
购买