Re: Windows 2003 - Dumping Service Passwords



I think Cain & Abel can also do the job.

Jeremy

Jason wrote:
I am currently conducting a penetration test and have compromised a Windows 2003 server which is a domain member server and have admin privs. I have noticed the system has numerous services which are running through domain accounts and some of those accounts are domain admins.

I understand the passwords for the services are stored in the LSA and I would like to dump them. I have tried lsadump2 and this just hangs and finally reboots the server. What other tools can I use on W2K3 to dump these passwords?

I would prefer to use something that does not need to be installed with an installer and does not require the server to be rebooted if that is possible.

Any help appreciated.

J


------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------



Relevant Pages

  • RE: Windows 2003 - Dumping Service Passwords
    ... Windows 2003 - Dumping Service Passwords ... Windows 2003 server which is a domain member server and have admin ... I understand the passwords for the services are stored in the LSA and I ... Cenzic Hailstorm finds vulnerabilities fast. ...
    (Pen-Test)
  • RE: Windows 2003 - Dumping Service Passwords
    ... Windows 2003 - Dumping Service Passwords ... Windows 2003 server which is a domain member server and have admin ... I understand the passwords for the services are stored in the LSA and I ... Cenzic Hailstorm finds vulnerabilities fast. ...
    (Pen-Test)
  • RE: Windows 2003 - Dumping Service Passwords
    ... I am currently conducting a penetration test and have compromised a Windows ... 2003 server which is a domain member server and have admin privs. ... I understand the passwords for the services are stored in the LSA and I ... Cenzic Hailstorm finds vulnerabilities fast. ...
    (Pen-Test)
  • Re: Windows 2003 - Dumping Service Passwords
    ... I understand the passwords for the services are stored in the LSA and I would like to dump them. ... I would prefer to use something that does not need to be installed with an installer and does not require the server to be rebooted if that is possible. ... Cenzic Hailstorm finds vulnerabilities fast. ...
    (Pen-Test)
  • RE: VmWare and Pen-test Learning
    ... Setup a tftp server on your client machine. ... Use John the Ripper to crack the passwords. ... (dictionary attacks, brute force, single mode). ... Download FREE whitepaper on how a managed service can help ...
    (Pen-Test)