RE: Windows 2003 - Dumping Service Passwords

From: Larry Seltzer <Larry@xxxxxxxxxxxxxxxx>
Date: Fri, 24 Nov 2006 06:35:21 -0500

If you have an account on the server then you can use Cain on your

local Windows machine to install the backdoor service Abel onto the
server via SMB, which will then let you dump the LSA Secrets and NT
Hashes.

Doesn't this require Domain Administrator privileges?

Larry Seltzer
eWEEK.com Security Center Editor
http://security.eweek.com/
http://blog.eweek.com/blogs/larry%5Fseltzer/
Contributing Editor, PC Magazine
larryseltzer@xxxxxxxxxxxxx

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------

References:
- Re: Windows 2003 - Dumping Service Passwords
  - From: one2

Prev by Date: RE: Windows 2003 - Dumping Service Passwords
Next by Date: Generating awareness amongst IT staff
Previous by thread: Re: Windows 2003 - Dumping Service Passwords
Next by thread: RE: Windows 2003 - Dumping Service Passwords
Index(es):
- Date
- Thread

Relevant Pages

Re: [Full-disclosure] Free Beer
... Subject: [Full-disclosure] Free Beer ... Larry Seltzer ... eWEEK.com Security Center Editor ... Contributing Editor, PC Magazine ...
(Full-Disclosure)
Re: [Full-disclosure] Windows POC
... On 5/16/07, Larry Seltzer wrote: ... eWEEK.com Security Center Editor ... Contributing Editor, PC Magazine ... Hosted and sponsored by Secunia - http://secunia.com/ ...
(Full-Disclosure)
RE: [Full-Disclosure] XP SP2 is out
... Larry Seltzer ... eWEEK.com Security Center Editor ... Full-Disclosure - We believe in it. ...
(Full-Disclosure)
Re: [Full-disclosure] Universal XSS with PDF files: highly dangerous
... On Reader 8 Acrobat you get a messagebox that ... Larry Seltzer ... eWEEK.com Security Center Editor ... Contributing Editor, PC Magazine ...
(Full-Disclosure)
Re: [Full-disclosure] Windows .ANI LoadAniIcon Stack Overflow
... What's the point of spraying the heap if you're not going to jump into ... Larry Seltzer ... eWEEK.com Security Center Editor ... Contributing Editor, PC Magazine ...
(Full-Disclosure)