Penetration Testing: Re: [PEN-TEST] EUSR_EXSTOREEVENT

[Todd Sabin <tas () WEBSPAN NET>]

securitygeek () HUSHMAIL COM writes:

> Has anyone been able to determine the password for the EUSR_EXSTOREEVENT
> account that gets created when Exchange 2000 is installed? A search on the
> Internet turned up 50 or so referances to the MS Security Bulliten (MS00-
> 088), but not the password.
> Thanks!
I'm not familiar with that particular issue, but it seems likely that
the password would be stored in the LSA secrets.  Did you try
lsadump2?

http://razor.bindview.com/tools/


Todd