OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Nelson (stderrUNREAL.SEKURE.ORG)
Date: Thu Jan 11 2001 - 13:44:52 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Thu, 11 Jan 2001, Beauregard, Claude Q wrote:

    > If I remember corectly Cybercop incorporates a password cracker that doesn't
    > require access to the SAM file but I believe this is for NT 3.51 and 4.0.
    > However I assume they are keeping up with Win2k so they may have
    > incorporated some changes.

    In version 5.5, Cybercop has the ability to Crack UNIX passwords only, but
    it has a tool named "SMBGrind", that can do a "Dictonary Attack" against
    NTLM Auth, i believe.

    But, in the same version, 5.5, the Cybercop Scanner can test if lsasecrets
    can be obtained. I can remember, but in the last test I made, was possible
    to obtain "lsasecrets" against WinNT SP5. Hmmm... I don't know...

    Sem mais, 

    --
Nelson Brito
Security Analyst && Penetration Tester
Security Networks AG / IBQN - http://www.secunet.de/