Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <45C7166B.7040806@googlemail.com>
Date: Mon, 05 Feb 2007 11:35:07 +0000
From: Hari Sekhon <hpsekhon@...glemail.com>
To:  john-users@...ts.openwall.com
Subject: Re: Windows Domain Account Cracking

Thanks, I came across pwdump6 at the weekend but haven't had a chance to 
try it yet.

I'll give it a try and have a look at the openwall site again.

-h

Hari Sekhon



Solar Designer wrote:
> Disclaimer: I'm not familiar with Windows.
>
> On Fri, Feb 02, 2007 at 06:15:32PM +0000, Hari Sekhon wrote:
>   
>> Ok, googling I found pwdump2 ...
>>     
>
> I suggest that you try one of the newer implementations, such as pwdump6:
>
> 	http://www.foofus.net/fizzgig/pwdump/
>
> pwdump6 is supposed to resolve the LSASS crash syndrome with DEP - this
> is described right on the above web page.
>
> I also have a collection of other PWDUMP tools linked to from here:
>
> 	http://www.openwall.com/passwords/microsoft-windows-nt-2000-xp-2003
>
> And there's a recent one that I haven't gotten around to trying out and
> listing yet:
>
> 	http://reedarvin.thearvins.com/tools.html
>
> (but I expect that you will find pwdump6 to be more mature).
>
>   
>> I even tried disabling DEP for lsass but got the same result...
>>     
>
> I am guessing that you did not really disable DEP.  Maybe your change
> failed to apply to the existing process or something.
>
>   

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.