[TOOL] Pass-The-Hash Toolkit
- From: SecuriTeam <support@xxxxxxxxxxxxxx>
- Date: 25 Jan 2008 18:46:09 +0200
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
The SecuriTeam alerts list - Free, Accurate, Independent.
Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html
- - - - - - - - -
Pass-The-Hash Toolkit
------------------------------------------------------------------------
SUMMARY
DETAILS
The Pass-The-Hash Toolkit contains utilities to manipulate the Windows
Logon Sessions maintained by the LSA (Local Security Authority) component.
These tools allow you to list the current logon sessions with its
corresponding NTLM credentials (e.g.: users remotely logged in through
Remote Desktop/Terminal Services), and also change in runtime the current
username, domain name, and NTLM hashes (YES, PASS-THE-HASH on Windows).
Direct download links:
source code:
<http://oss.coresecurity.com/pshtoolkit/release/1.2/pshtoolkit_v1.2_src.tgz> http://oss.coresecurity.com/pshtoolkit/release/1.2/pshtoolkit_v1.2_src.tgz
Binaries:
<http://oss.coresecurity.com/pshtoolkit/release/1.2/pshtoolkit_v1.2.tgz>
http://oss.coresecurity.com/pshtoolkit/release/1.2/pshtoolkit_v1.2.tgz
ADDITIONAL INFORMATION
The information has been provided by <mailto:hernan@xxxxxxxxx> Hernan
Ochoa.
To keep updated with the tool visit the project's homepage at:
<http://oss.coresecurity.com/projects/pshtoolkit.htm>
http://oss.coresecurity.com/projects/pshtoolkit.htm
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@xxxxxxxxxxxxxx
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@xxxxxxxxxxxxxx
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.
- Prev by Date: [NT] IBM Tivoli PMfOSD HTTP Request Method Buffer Overflow Vulnerability
- Next by Date: [UNIX] IBM AIX pioout BSS Buffer Overflow Vulnerability
- Previous by thread: [NT] IBM Tivoli PMfOSD HTTP Request Method Buffer Overflow Vulnerability
- Next by thread: [UNIX] IBM AIX pioout BSS Buffer Overflow Vulnerability
- Index(es):
Relevant Pages
|
|
