1 2 3
Samdump2 is a tool to dump password hashes from windows systems. It is typically used on a mounted NTFS partition, but just needs access to the SYSTEM and SAM files.