RE: Access to a win NT box

From: Davis, Matt (matt.davis@countryfinancial.com)
Date: 06/26/02 

From: "Davis, Matt" <matt.davis@countryfinancial.com>
To: 'Pedro Miranda' <rpmiranda@sonae.pt>
Date: Wed, 26 Jun 2002 09:35:39 -0500

If I remember correctly, you should be able to pull it off in a format that
LC3 can hammer on if you grab the file at
\\machinename\c$\winnt\system32\config

Alternately, you should be able to schedule a generation of the RDISK
information using

at \\machinename time "c:\winnt\system32\RDISK /S-"

Unless, of course, the administrator of the box pulled rdisk off of it.

Matt Davis, MCSA
Intermediate Client/Server Analyst
Client/Server Business Support
mailto:matt.davis@countryfinancial.com

>-----Original Message-----
>From: Pedro Miranda [mailto:rpmiranda@sonae.pt]
>Sent: Tuesday, June 25, 2002 11:43 AM
>To: pen-test@securityfocus.com
>Subject: Access to a win NT box
>
>
>
>
>Hi, I've got remote access to a wNT box using the command
>
>\\machinename\c$ /user:machinename\administrator
>
>So i've got administrator privileges but i want to access to the SAM
>database.
>
>I've tried to get \\winnt\repair\sam._ but i couldn't find the rdisk
>comand.
>
>Can anybody help tell me where can i find this software, or if
>there is
>another way to get access to the sam file.
>
>Thanks in advance
>
>---------------------------------------------------------------
>-------------
>This list is provided by the SecurityFocus Security
>Intelligence Alert (SIA)
>Service. For more information on SecurityFocus' SIA service which
>automatically alerts you to the latest security
>vulnerabilities please see:
>https://alerts.securityfocus.com/
>

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/

Relevant Pages

  • RE: MS Office Files
    ... You are trying to trace back to a particular machine I ... > This list is provided by the SecurityFocus Security ... > Intelligence Alert Service. ... > SecurityFocus' SIA service which automatically alerts you to ...
    (Pen-Test)
  • RE: Laboratory Setup Help (RS)
    ... >> This list is provided by the SecurityFocus Security ... For more information on SecurityFocus' SIA service which ... >> vulnerabilities please see: ... >This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • RE: Terminal Server brute force
    ... This utility helps automate manual login/password attempts. ... > This list is provided by the SecurityFocus Security ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • RE: Cant get a shell
    ... If the firewall is the issue, ... > This list is provided by the SecurityFocus Security ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • Re: Send output to file in SQL
    ... the main idea of my posting was to create a file using sql ... > This list is provided by the SecurityFocus Security ... > SecurityFocus' SIA service which automatically alerts you to ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)