OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Tool for removing LANMAN hashes from registry

From: Eric (ewstellurian.com)
Date: Mon Oct 04 2004 - 12:53:52 CDT

www.toolcrypt.org - thrashlm

http://www.toolcrypt.org/tools/thrashlm/index.html

At 07:33 AM 10/4/2004, Per Øyvind Thorsheim wrote:
>I'm in the process of finishing a paper on auditing Windows user accounts
>and passwords (available before christmas), and i'm looking for some
>investigative help:
>
>Sometime earlier i think i read about someone who had made a tool enabling
>an administrator to delete single LANMAN hash values from the registry
>without having to change the password for every account after implementing
>MSKB 299656 "How to prevent Windows from storing a LAN manager hash of your
>password in Active Directory and local SAM databases".
>
>Any ideas to the existence and URL of such a tool would be greatly
>appreciated.
>
>Regards,
>
>Per Thorsheim
>CISA - CISM - CISSP
>Putilutt (at) online.no
>
>
>
>---------------------------------------------------------------------------
>---------------------------------------------------------------------------

---------------------------------------------------------------------------
---------------------------------------------------------------------------