OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Beauregard, Claude Q (CQBeauregardAAAMICHIGAN.COM)
Date: Wed Jan 24 2001 - 10:58:44 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    I noticed that when I use PWDUMP3 against a domain of 500 users and load the
    file into L0phtcrack 2.52 the file is read however when I run the dump on a
    domain of 800 or more and try to load the file in L0phtcrack it crashes. At
    this point I 'm not sure if it a problem with L0phtcrack or PWDUMP3

    -----Original Message-----
    From: Penetration Testers [mailto:PEN-TESTSECURITYFOCUS.COM]On Behalf
    Of Thibodeaux, Mark
    Sent: Wednesday, January 24, 2001 10:21 AM
    To: PEN-TESTSECURITYFOCUS.COM
    Subject: Re: [PEN-TEST] PWDump3

    PWDUMP3 works, but it still needs refinement. It seems to be limited in
    the number of users it can dump, probably because it is using the
    registry to transfer the dumped passwords. During a test on a Windows
    2000 Domain Controller with some 20,000 users it quit about halfway
    through. It also did not successfully remove itself from the target
    machine in this test. It worked fine on a Windows 2000 Professional
    workstation.

                     -----Original Message-----
                    From: Penetration Testers
    <PEN-TESTSECURITYFOCUS.COM>ENRON
    [mailto:IMCEANOTES-Penetration+20Testers+20+3CPEN-TEST+40SECURITYFOCUS+2
    ECOM+3E+40ENRONENRON.com] On Behalf Of "Cintron, Jose"
    <jcintronIMSIDC.COM>
                    Sent: Tuesday, January 23, 2001 5:36 PM
                    To: PEN-TESTSECURITYFOCUS.COM
                    Subject: Re: [PEN-TEST] PWDump3

                    I downloaded it and tried it... Now you can Dump the
    Passwords from a
                    remote machine (assuming you have enough privileges).
    That's all I've seen
                    so far, but trust me it does work.