pen-test
[Top] [All Lists]

Re: Windows 2003 - Dumping Service Passwords

To: Jason <turbo4wd@yahoo.com>
Subject: Re: Windows 2003 - Dumping Service Passwords
From: Jeremy Saintot <jeremy@caramiel.com>
Date: Thu, 23 Nov 2006 09:55:30 +0100
Cc: pen-test@lists.securityfocus.com
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
In-reply-to: <20061121121929.6193.qmail@web50007.mail.yahoo.com>
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
References: <20061121121929.6193.qmail@web50007.mail.yahoo.com>
Resent-date: Fri, 24 Nov 2006 01:06:10 -0700 (MST)
Resent-from: pen-test-return-1078483034@securityfocus.com
Resent-message-id: <20061124080610.6A7DD16050E@outgoing2.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
User-agent: Thunderbird 1.5.0.7 (X11/20060922)
I think Cain & Abel can also do the job.

Jeremy

Jason wrote:
I am currently conducting a penetration test and have compromised a Windows 
2003 server which is a domain member server and have admin privs. I have 
noticed the system has numerous services which are running through domain 
accounts and some of those accounts are domain admins.

I understand the passwords for the services are stored in the LSA and I would 
like to dump them. I have tried lsadump2 and this just hangs and finally 
reboots the server. What other tools can I use on W2K3 to dump these passwords?

I would prefer to use something that does not need to be installed with an 
installer and does not require the server to be rebooted if that is possible.

Any help appreciated.

J


------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>