mailing list archives
Release of Pass-The-Hash Toolkit v1.4
From: "Hernan Ochoa" <hernan () gmail com>
Date: Wed, 2 Jul 2008 15:42:15 -0300
*Support for XP SP 3 for whosthere/iam (whosthere-alt/iam-alt work on xp sp3
without requiring any update)
*New -t switch for whosthere/whosthere-alt: establishes interval used
by the -i switch (by default 2 seconds).
*New -a switch for whosthere/iam: specify addresses to use. Format:
(WARNING!: if you use the wrong values the system may crash)
The idea is that, if you find yourself in a version of Windows where
whosthere/iam don't work (and iam-alt/whosthere-alt don't work
either); you can run LSASRV.DLL thru IDA, run the PASSTHEHASH.IDC
script included in the Pass-The-Hash toolkit, and use the addresses
found by the script with the -a switch.
This basically allows you to specify addresses at runtime to whosthere whithout
the need to recompile the tool.
*New -r switch for iam/iam-alt: Create a new logon session and run a
the specified credentials (e.g.: -r cmd.exe)
*genhash now outputs hashes using the LM HASH:NT HASH format
*several bugfixes and stuff
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/
- Release of Pass-The-Hash Toolkit v1.4 Hernan Ochoa (Jul 02)