pen-test
[Top] [All Lists]

Active Directory Pentest

To: pen-test@securityfocus.com
Subject: Active Directory Pentest
From: "Ricardo Mourato" <ricardomcm@gmail.com>
Date: Wed, 30 May 2007 10:06:34 +0100
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=kbqb/mzD0xggEhFhPr5U9IOqhWrlXhClDydNdjXCeXDYs1ohLwmOu9VLH2OqFkoyLpig9whLghwO4k70xwzD0j1b9Bsnu+NKDgsBRs80pQFwhBsbAh+9kHSwnoDlVeQkTuYuKmLZfzEPF9krvjQCq65XuAYJy586VhMCJLJPJHY=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=ccCPhWHUTTab5NcW4T+W5e+72a8t4f3H6vW8JmwxczNVlmoVGSM33S1QpBKjDBHeHA6410OZh1OoEcRqMIdHp0Vt/fLqmQS21MXYUrZzEIWGbZ7Axa9XqeEmFSb/nP6e8lbL+YAl/guRECaHzwxP7Wbhzs7uWSkGphvOfRpnJC0=
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
Resent-date: Wed, 30 May 2007 10:02:53 -0600 (MDT)
Resent-from: pen-test-return-1078484279@securityfocus.com
Resent-message-id: <20070530160253.034AE144459@outgoing2.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
hi folks, in a costumer network where i'm doing a pentest, i found an
Active Directory Server, this one also runs SQL server 2000 SP1, i've
found that SQL server doenst have a password on the SA account, so it
was easy to get in with NT/SYSTEM, but my question is, where is the AD
users directory located?
tnks in advice

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>