[IIS 6] UNCPassword

From: daemonsec-pentest@xxxxxxxx
Date: Wed, 21 Feb 2007 15:30:27 +0000 (GMT)

Hi,
i'm doing a penetration test from the internal lan of our customer.
I retrieved a metabase.xml file from IIS 6 Server and i found some "UNCPassword" fields
with an encrypted password.

How can i crack these passwords? Is there any tool?
Which type of ecnryption is it?

Regards,

___________________________________
L'email della prossima generazione? Puoi averla con la nuova Yahoo! Mail:
http://it.docs.yahoo.com/nowyoucan.html

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------

Prev by Date: Re: Website detection
Next by Date: RE: Websites Finding
Previous by thread: What protocol to choose for a new fuzzer?
Next by thread: Any suggests about a possible LRE (local root escalation)
Index(es):
- Date
- Thread

Relevant Pages

Re: windows 2003 server
... How does one dump the passwords from the SAM file. ... Subject: windows 2003 server ... password policy and _not_ how to break into the win2003 server, ... Cenzic Hailstorm finds vulnerabilities fast. ...
(Pen-Test)
RE: windows 2003 server
... How does one dump the passwords from the SAM file. ... Subject: windows 2003 server ... Password policy can be found in Administrative Tools/ ... Cenzic Hailstorm finds vulnerabilities fast. ...
(Pen-Test)
RE: Windows 2003 - Dumping Service Passwords
... Windows 2003 - Dumping Service Passwords ... Windows 2003 server which is a domain member server and have admin ... I understand the passwords for the services are stored in the LSA and I ... Cenzic Hailstorm finds vulnerabilities fast. ...
(Pen-Test)
RE: Windows 2003 - Dumping Service Passwords
... Windows 2003 - Dumping Service Passwords ... Windows 2003 server which is a domain member server and have admin ... I understand the passwords for the services are stored in the LSA and I ... Cenzic Hailstorm finds vulnerabilities fast. ...
(Pen-Test)
Re: Injected, whats next
... Tried that, and it looked promising, however got stuck with the magic quotes. ... Does anyone know a way to upload a file to a server through MySQL! ... Cenzic Hailstorm finds vulnerabilities fast. ...
(Pen-Test)