OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Matthew Pemble (mpembleISINTEGRATION.COM)
Date: Fri Jan 12 2001 - 07:45:31 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    Tamas wrote:

    >Does anyone knows any password brute forcer that works without
    >accessing the SAM file?
    >
    >We are still eager to hear further ideas on this issue since nothing
    >that we tried worked yet.

    If you can't get the SAM, can you run a packet sniffer on the target
    machine? If so, grab the NTLM authentication hashes and L0phtcrack
    can process them. Much, much slower than SAM cracking, though.

    You ought to be able to run a program within the IUSR context, your
    ability to install will depend on the individual sniffer.

    Matthew Pemble, Principal Consultant, IS Integration,
    Preston Technology Management Centre, Marsh Lane, PRESTON,
    Lancashire, PR1 8UD

    Tel: +44 (0)1324 820690 Fax: +44 (0)1324 826034

    Head Office:
    Tel: +44 (0)1772 885850 Fax: +44 (0)1772 558881
    Mobile: +44 (0)7050 128620
    Mailto:mpembleisintegration.com Web: http://www.isintegration.com

    This email and any files transmitted with it are confidential and
    intended
    solely for the use of the individual or entity to whom they are
    addressed.
    If you have received this email in error please notify your system
    manager
    or IS Integration Limited on +44 (0) 1772 885850

    Any Views expressed in this e-mail message are those of the
    individual
    sending the message, except where the sender specifically states them
    to be
    the views of IS Integration Limited.

    -----BEGIN PGP SIGNATURE-----
    Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

    iQA/AwUBOl7GuGrvMjpl5yaUEQKhvgCg/hphYCNC7Wl+oOCe0Kl/k78G6bwAoK5t
    EhiveHkHFoubWDRSNCJjsbJE
    =EqEI
    -----END PGP SIGNATURE-----