Re: Pwdump2 with UNICODE

From: hellNbak (hellnbak@nmrc.org)
Date: 08/10/01 

Date: Fri, 10 Aug 2001 10:52:08 -0400 (EDT)
From: hellNbak <hellnbak@nmrc.org>
To: Penetration Testing <pentest@infosecure.com.au>
Subject: Re: Pwdump2 with UNICODE
Message-ID: <***.666.6.66.0108101050001.14793-100000@www.nmrc.org>

Actually, this in incorrect.

Under Win2K you need specific rights to use the scheduler. Under NT
however, you do not.

On Fri, 10 Aug 2001, Penetration Testing wrote:

>
> On Wed, 8 Aug 2001 steven.m.gill@us.pwcglobal.com wrote:
>
> >
> > FYI,
> >
> > While this does work on NT4, using cmdasp.asp on 2K will not dump the
> > hashes. This is because IIS 5 runs the Windows Scripting Host under th
> > IWAM_<machine-name> context.
> >
> > Steve
> >
>
> You can generally get around this. Run a "net start" to see if the
> Scheduler service is running. If it is, then you can use "at" to schedule
> an rdisk /s-.
>
> Dave Taylor
>
>
>
> ----------------------------------------------------------------------------
> This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
> Service. For more information on SecurityFocus' SIA service which
> automatically alerts you to the latest security vulnerabilities please see:
> https://alerts.securityfocus.com/
>

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

"I'm in trouble for the things I haven't got to yet"

hellNbak@nmrc.org
http://www.nmrc.org

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/