Re: pwdump 2 & 3

From: IndianZ (indianz_at_indianz.ch)
Date: 12/15/04

  • Next message: leonardo: "Re: Research on penetration testing?"
    Date: Wed, 15 Dec 2004 21:41:51 +0100
    To: pen-test@securityfocus.com
    
    

    Hi

    Well it is possible, that logon-information is not cached locally (I mean, only in memory) for security reasons. Seems like you have to get the SAM (with all domain-users inside) from a domain-controller ;-)... Did you check for other SAM-files in the local filesystem (%windir%\repair)?

    GreetZ from IndianZ

    mailto:indianz@indianz.ch
    http://www.indianz.ch

    On Wed, 15 Dec 2004 19:17:19 +0100
    Guillaume Lavoix <glavoix@altadis.com> wrote:

    > Hello,
    >
    > Does anyone knows if it is posible with pwdump to get the information
    > About a logged on user.
    >
    > For instance, If I log on my computer, I use a domain logon, and when I
    > execute pwdump I only see local user....
    >
    > Any idea ?
    >
    > Thanks for your help,
    >
    > Sincerely,
    > Guillaume


  • Next message: leonardo: "Re: Research on penetration testing?"