Home page logo
/

pen-test logo Penetration Testing mailing list archives

RE: Windows 2003 - Dumping Service Passwords
From: "Goran Pizent" <goran.pizent () ekobit hr>
Date: Mon, 27 Nov 2006 09:42:29 +0100

Jessie,

That depends on the meaning of the word "reliable". :o)

Really reliable, as I can see it is that you develop your own tools. That is
the best way. 

However you can reverse engineer existing tools to ensure yourself that
particular tool is not Trojan or some kind of malware.

For this particular LSA Dump tool I am definitely not sure that it is
"reliable".
I have used it in my testing networks, but that is not production
environment. 
Every Pentester should (because of ethics at least, not to mention
contracts) verify origin and behavior of tools that he/she uses in
production environment. 

So if you really need some tool write your own tool or you could kindly ask
author of existing tool to give you source code so that you can analyze code
and compile it yourself.


GoranP


P.S. I know that's not easy but reliability is not always easy. ;)



-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of Jessie Ling XX (MC/EPA)
Sent: Sunday, November 26, 2006 11:28 PM
To: pen-test () lists securityfocus com
Subject: RE: Windows 2003 - Dumping Service Passwords

Hi

I am interested in doing penetration test of a network. Can someone
recommend freeware tools which are 'reliable' to use?

Thanks
Jess.

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Goran Pizent
Sent: Wednesday, 22 November 2006 8:14 PM
To: 'Jason'; pen-test () lists securityfocus com
Subject: RE: Windows 2003 - Dumping Service Passwords

Hello Jason,

Try this one.
http://www.nirsoft.net/utils/lsa_secrets_dump.html


Hope that helps,
GoranP




-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Jason
Sent: Tuesday, November 21, 2006 1:19 PM
To: pen-test () lists securityfocus com
Subject: Windows 2003 - Dumping Service Passwords

I am currently conducting a penetration test and have compromised a
Windows
2003 server which is a domain member server and have admin privs. I have
noticed the system has numerous services which are running through
domain accounts and some of those accounts are domain admins.

I understand the passwords for the services are stored in the LSA and I
would like to dump them. I have tried lsadump2 and this just hangs and
finally reboots the server. What other tools can I use on W2K3 to dump
these passwords?

I would prefer to use something that does not need to be installed with
an installer and does not require the server to be rebooted if that is
possible.

Any help appreciated.

J


 
________________________________________________________________________
____
________
Sponsored Link

Online degrees - find the right program to advance your career. 
www.nextag.com

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=7016
0000
0008bOW
------------------------------------------------------------------------



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=7016
00000008bOW
------------------------------------------------------------------------


------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=70160000
0008bOW
------------------------------------------------------------------------



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault