Re: forgotten admin password

cesar montano wrote:
mates,
need your inputs badly. we have w2k3 server with
a newly installed application ... unfortunately, the
system staff who's in-charge for that server has
forgotten the admin password he inputted in the last
few weeks. any idea on how to recover it or other
way to login on that server?



You could run something like Locksmith (does that run on W2K3? It's been
awhile since I used it). That's the easiest, but not as much fun as the
other solutions. :)

Otherwise, what other sorts of services are running on it? Has it been
recently patched?

If it's behind in patching, exploit it using your favorite vuln o'the
day (like the recent DNS vulnerability perhaps) in Metasploit, Canvas,
etc. If you've got old BackupExec on it, that too is sometimes
vulnerable. Many of these exploits allow you to run as System, which
means you can dump the passwords and crack them. Besides, it's kind of
fun and liberating breaking into your own boxes.

If SQL Server is installed on the box, it's quite possible someone left
an easy sa password on it, which also might mean you can execute tasks
as system via xp_cmdshell. Just like vuln exploiting, dump the passwords
and crack them appropriately.

Admittedly, these paths are overkill, but as I said, they are more fun
than simply rebooting with Locksmith or something. :) After all, this is
pen-test.


--f

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------

Relevant Pages

  • ISA2000 und W2K3 SP1 => VORSICHT!
    ... Nachweislich behindert das SP1 vom W2K3 Server unsere, bis dahin, ... VPN Einwahl mit MS VPN Client mit L2TP over IPSec ... Bis zur Installation des SP1 vom W2K3 Server konnten sich mehrfach ...
    (microsoft.public.de.german.isaserver)
  • RE: Migrating NT Server 4.0 to W2K3 Server
    ... I understand you want to perform migrate from WinNT to Win2k3 domain. ... My main concern is that the W2K3 server will start assigning IPs via ... DHCP to my NT4 and XP Pro workstations. ... And what happens when I transfer back the W2K3 server back to its own ...
    (microsoft.public.windows.server.migration)
  • RE: Globaler Katalogserver (GC)
    ... AD-Standorte und Dienste als globalen Katalogserver zu aktivieren. ... > wir haben ein AD bestehend aus einem W2K3 Server der sämtliche FSMO Rollen ... Next by Date: ...
    (microsoft.public.de.german.windows.server.active_directory)
  • Re: Multihomed windows 2003 server DNS problems
    ... line that comes from the ISP and goes to Linux. ... from the same switch to w2k3 server with one subnet, ... the w2k3 server passes all tests. ...
    (microsoft.public.windows.server.dns)
  • RE: W2k dc migration to W2k3 dc (NEW HARDWARE)
    ... install it on a member server. ... | upgrade to W2k3 server and exchange server 2003 on new hardware acting as ... | Clear Error log (let servers run together for couple of days to insure ... | VII. Install Exchange Server 2003 on W2k3 server box. ...
    (microsoft.public.windows.server.migration)