OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
RE: Format of SAM File

From: Anthony Miracle (ronin7calima7.net)
Date: Fri Jul 10 2009 - 12:07:45 CDT

Hey Miguel,

Looks like http://www.tech-faq.com/windows-password-file.shtml has a
decent explanation of the pwdump output. For future reference, I found
this through Googling "pwdump output".

--
Anthony Miracle
GCIH

-----Original Message-----
From: listbouncesecurityfocus.com [mailto:listbouncesecurityfocus.com]
On Behalf Of Hernandez IV, Miguel
Sent: Thursday, July 09, 2009 3:40 PM
To: pen-testsecurityfocus.com
Subject: Format of SAM File

All,

Looking for a reference that describes the format of the windows SAM
file. From what I can tell, the first column is the username and third
column is the password hash, but I want to know what information is
contained in the other columns. Google searches on "format windows SAM
file", "understand windows SAM file", and other related searches have
proved frustrating. I should mention that the SAM file was obtained
using pwdump6 in case that is relevant. The format I am seeing is as
follows:

Username:number:password hash:another hash?:blank:blank:blank

Any help is much appreciated.

Miguel

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review
Board

Prove to peers and potential employers without a doubt that you can
actually do a proper penetration test. IACRB CPT and CEPT certs require a
full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------