WINDOWS PE

Angry-IP-Scanner
http://www.drowaelder.de/winpe/PEIndex.htm
Great for finding out what hosts are on your network.

Eraser
http://www.bootcd.us/BartPE_Plugin_Details/57/
Great for scrubbing the hard drive clean of all data.

Firefox-1.9 and Firefoxflash-1.1
http://oss.netfarm.it/winpe/
Use these plugins to run the Firefox web browser from your boot CD.

HWPnP
http://www.paraglidernc.com/6901.html
Normal a PE Builder boot CD only looks for hardware on startup, but if you plug in something like a USB thumb drive after you boot, PE will fail to find it. The HWPnP plugin will allow you to plug in USB devices anytime you like.

InsidePro Tools v1.0.0
http://www.insidepro.com/eng/download.shtml
Great tool for bypassing Syskey and grabbing password hashes from the SAM file. I use the older SAMInside v2.1.3.0 version because the newer demo versions disable the export to PWDUMP file option that’s useful for importing into L0phtcrack.

Keyfinder-PE
http://www.drowaelder.de/winpe/PEIndex.htm
The Keyfinder-PE plugin will extract the XP registration key from the hard drive.

Registry Editor PE v0.9c
http://regeditpe.sourceforge.net/
Sometime you may need to do finer work to the registry then Ad-Aware or HiJackThis will allow. Registry Editor PE lets you load the registry hives off of the local hard drive and edit any key you like.

Sam Spade
http://www.gonetiq.com/winpe
Sam Spade is a collection of useful network tools for finding out information about hosts on the Internet. Sam is quite popular with spam-fighters.

Windows Password Renew 1.0-RC2 for WinPE
http://www.sala.pri.ee#pass
Password Renew lets the user change the password of the local Administrator account or create a new admin level user with a password of their choice. This is a great tool for getting into Windows boxes you don’t have an admin password for.

I hope you have found this article useful. If you have any questions or comments please feel free to e-mail them to me at Irongeek@irongeek.com.


Further research:

911 Rescue CD Forums, the best place to ask questions about PE Builder and its plugins:
http://www.911cd.net/forums/

Adrian’s PE Builder Website:
http://www.irongeek.com/i.php?page=security/pebuilder

Bart’s PE Builder Homepage:
http://www.nu2.nu/pebuilder/

Bart’s notes on adding additional network and SCSI drivers:
http://www.nu2.nu/pebuilder/help/drivers.htm

Sherpya’s XPE and collection of plugins:
http://oss.netfarm.it/winpe/

A huge collection of PE Builder plugins:
http://www.bootcd.us

Another great step by step tutorial on using PE Builder and XPE:
http://xpe.collewijn.info/index.php