OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: Where are Windows "Enforce password history" passwords stored?

From: Tony King (agkcomputersbtinternet.com)
Date: Mon Aug 29 2005 - 15:12:13 CDT

Have a look at this link it might be what you are after.

http://starbase.airweb.net/tech/hack-faq.html#13.0

Rgds

Tony

-----Original Message-----
From: Charles Gillman [mailto:charles.gillmangmail.com]
Sent: 29 August 2005 02:14
To: pen-testsecurityfocus.com
Subject: Where are Windows "Enforce password history" passwords stored?

Can anyone tell me where the "remembered" passwords are stored when
the "Enforce password history" is set in Group Policy?

If this setting is set to its maximum value of 24 then I would expect
24 password hashes are stored for each account for the setting to
work. But where?

More importantly are there any tools/techniques for accessing the
"remembered" passwords?

Thanks
CG

--
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.0.344 / Virus Database: 267.10.16/83 - Release Date: 26/08/2005

--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.344 / Virus Database: 267.10.16/83 - Release Date: 26/08/2005