RE: focus-ms@securityfocus.com

Dave.Hartley_at_uk.delarue.com
Date: 08/26/03

  • Next message: Russell V. Toone: "RE: Patch testing" 
    To: pwilbert@uninet.com.br, focus-ms@securityfocus.com
Date: Tue, 26 Aug 2003 15:47:08 +0100

    Try...

    PWDUMP3 ....

    http://vh224401.truman.edu/pub/win32/apps/pwdump3/

    -----Original Message-----
    From: Paulo Wilbert [mailto:pwilbert@uninet.com.br]
    Sent: 26 August 2003 02:20
    To: focus-ms@securityfocus.com
    Subject: focus-ms@securityfocus.com

    Hi,

    Looking users and password in control panel of my W2k
    workstation (5.00.2195 SP4) I got the following:

    User Name - Domain - Group
    administrator - my computer name - administrators
    helpdesk - my computer name - administrators
    guest - my computer name - guests
    my user id - my domain - administrators, power
    users

    Using pwdump2 to extract hashes I only got the first three but not the
    forth one that I use to logon in my corporate LAN. Once I can
    logon standalone with 'my user id' I assume that the related password is
    stored locally. Is it correctly? If yes, where? Is Pwdump2 capable of get
    its hash?

    Thanks,

    Paulo.

    ---------------------------------------------------------------------------
    KaVaDo provides the first and only integrated Web application scanner and
    firewall security suite that prevent Web applications attacks, the most
    common form of online exploitation. Download a FREE whitepaper on Security
    Policy Automation for Web Applications.
    http://www.securityfocus.com/sponsor/KaVaDo_focus-ms_030818
    ---------------------------------------------------------------------------

    This message is strictly private and contains confidential information intended only for the use of the person named above. If you have received this e-mail in error and are not the intended recipient you must not disclose, copy or distribute it to anyone else. Please immediately advise the sender and delete this email and all attachments.

    ---------------------------------------------------------------------------
    KaVaDo provides the first and only integrated Web application scanner and
    firewall security suite that prevent Web applications attacks, the most
    common form of online exploitation. Download a FREE whitepaper on Security Policy Automation for Web Applications.
    http://www.securityfocus.com/sponsor/KaVaDo_focus-ms_030818
    ---------------------------------------------------------------------------

  • Next message: Russell V. Toone: "RE: Patch testing"

    Relevant Pages

    • Re: Why Programs get written to need admin priveleges.
      ... >>Why administrators must pesuade some applications to run with ... >>firewall security suite that prevent Web applications ... >>common form of online exploitation. ... >>Security Policy Automation for Web Applications. ...
      (Focus-Microsoft)
    • focus-ms@securityfocus.com
      ... administrator - my computer name - administrators ... Using pwdump2 to extract hashes I only got the first three but not the ... firewall security suite that prevent Web applications attacks, ... Download a FREE whitepaper on Security Policy Automation for Web Applications. ...
      (Focus-Microsoft)
    • RE: windows update
      ... and then download the specific file. ... using windows update, and SUS? ... firewall security suite that prevent Web applications attacks, ... Policy Automation for Web Applications. ...
      (Focus-Microsoft)
    • Re: focus-ms@securityfocus.com
      ... local password caching need never be to a local file on a ... ticket issued Kerberose must use some sort of credential caching. ... > firewall security suite that prevent Web applications attacks, ...
      (Focus-Microsoft)
    • RE: Patch testing
      ... If you don't have mirrored disk capabilities - use Norton Ghost to snap an ... image of the system partition on the server before patching. ... > firewall security suite that prevent Web applications ... > whitepaper on Security Policy Automation for Web Applications. ...
      (Focus-Microsoft)