Home page logo

pen-test logo Penetration Testing mailing list archives

Re: Windows 2003 - Dumping Service Passwords
From: Jerome Athias <jerome.athias () free fr>
Date: Wed, 22 Nov 2006 08:46:33 +0100

Jason a écrit :
I am currently conducting a penetration test and have compromised a Windows 2003 server which is a domain member server 
and have admin privs. I have noticed the system has numerous services which are running through domain accounts and 
some of those accounts are domain admins.

I understand the passwords for the services are stored in the LSA and I would like to dump them. I have tried lsadump2 
and this just hangs and finally reboots the server. What other tools can I use on W2K3 to dump these passwords?

I would prefer to use something that does not need to be installed with an installer and does not require the server to 
be rebooted if that is possible.

Any help appreciated.

Ask "your friend" for:


(yes *fizzgig! someone read your website ;-)
*"What the heck are you using pwdump for? * fgdump <http://www.foofus.net/fizzgig/fgdump>* does *everything* pwdump does, only more! I highly recommend switching over as soon as possible. :)"

(no installation required : difference with Cain&Abel ;p)


Webmaster https://www.securinfos.info

This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]