From: chillman (charles.gillmangmail.com)
Date: Thu Jun 30 2005 - 18:11:51 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Chris

You are getting the very messy output of a binary file (Backup SAM)
displayed in your browser?

There was a Perl script to reassemble this output into a SAM file
which was used against the old Compaq Insight Manager directory
traversal vulnerability. I don't have the URL, try AstalaVista or
Google.

Once you have the binary SAM file you can use SAMDUMP to convert into
a PWDump format for importing into your favourite password cracker.

Regards
Charles

On 28 Jun 2005 19:02:54 -0000, nordicsmakyahoo.com
<nordicsmakyahoo.com> wrote:
> During a recent penetration test I've discovered a flaw in the IIS server that allows me to browse to and view any file on the system.
>
> I'm able to browse to the /winnt/repair/sam file, but it obviously is unusable in the format that's presented in the browser.
>
> Any way to get this file in a format that can be used in L0pht?
>
> Thanks,
> Chris
>

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]