How To Install bkhive on CentOS 7

In this tutorial we learn how to install bkhive on CentOS 7. bkhive is Dump the syskey bootkey from a Windows system hive

Introduction

In this tutorial we learn how to install bkhive on CentOS 7.

What is bkhive

This tool is designed to recover the syskey bootkey from a Windows NT/2K/XP system hive. Then we can decrypt the SAM file with the syskey and dump password hashes. Syskey is a Windows feature that adds an additional encryption layer to the password hashes stored in the SAM database.

We can use yum or dnf to install bkhive on CentOS 7. In this tutorial we discuss both methods but you only need to choose one of method to install bkhive.

Install bkhive on CentOS 7 Using yum

Update yum database with yum using the following command.

sudo yum makecache

After updating yum database, We can install bkhive using yum by running the following command:

sudo yum -y install bkhive

Install bkhive on CentOS 7 Using dnf

If you don’t have dnf installed you can install DNF on CentOS 7 first. Update yum database with dnf using the following command.

sudo dnf makecache

After updating yum database, We can install bkhive using dnf by running the following command:

sudo dnf -y install bkhive

How To Uninstall bkhive on CentOS 7

To uninstall only the bkhive package we can use the following command:

sudo dnf remove bkhive

References

Summary

In this tutorial we learn how to install bkhive on CentOS 7 using yum and dnf.