Extraction of cached credentials from NTUSER.DAT

From: Perciaccante, Robert (Robert.Perciaccante@dowjones.com)
Date: 11/30/01 

Message-ID: <B1311854A212D311A5FE0008C7A4FAC80521085A@sbkmxsmb07>
From: "Perciaccante, Robert" <Robert.Perciaccante@dowjones.com>
To: pen-test@securityfocus.com
Subject: Extraction of cached credentials from NTUSER.DAT
Date: Fri, 30 Nov 2001 10:52:56 -0500

I am looking for assistance in extracting cached login information from
NTUSER.DAT files collected. Can anyone recommend a good way to do this?

Thanks,

Bob

---------------------------
Robert Perciaccante
Security Auditor Consultant
Information Security

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/

Relevant Pages

  • RE: Insurance
    ... property--data beign deemed "intangible" for the purposes of insurance. ... for physical security testing there are often 3rd parties ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • RE: SQL
    ... Subject: SQL ... >> This list is provided by the SecurityFocus Security ... For more information on SecurityFocus' SIA service which ... >This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • RE: Pen-Testing Lotus Notes/Domino
    ... Subject: Pen-Testing Lotus Notes/Domino ... of document security. ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • RE: Scanners and unpublished vulnerabilities - Full Disclosure
    ... http://eEye.com/Retina - Network Security Scanner ... | Subject: RE: Scanners and unpublished vulnerabilities - Full Disclosure ... I don't only want protection from 0 day exploits, ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • RE: MORE: Tools for Detecting Wireless APs - from the wire side.
    ... I find it amazing -- the question CLEARLY states "from the wire side", ... Subject: MORE: Tools for Detecting Wireless APs - from the wire ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)