From: Jon Westcott (jon@isyseurope.com)
Date: Mon Nov 27 2006 - 06:51:52 EST
Jess,
Take a look at the Backtrack project -
http://www.remote-exploit.org/index.php/BackTrack
There is also a book that covers many of these tools - Pentester's Open
Source Toolkit (although based on Auditor, it is the 'earlier version' of
Backtrack)
Hope this helps,
Jon
Consultant - InfoRisk Security Consulting
-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com] On
Behalf Of Jessie Ling XX (MC/EPA)
Sent: 26 November 2006 22:28
To: pen-test@lists.securityfocus.com
Subject: RE: Windows 2003 - Dumping Service Passwords
Hi
I am interested in doing penetration test of a network. Can someone
recommend freeware tools which are 'reliable' to use?
Thanks
Jess.
-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com]
On Behalf Of Goran Pizent
Sent: Wednesday, 22 November 2006 8:14 PM
To: 'Jason'; pen-test@lists.securityfocus.com
Subject: RE: Windows 2003 - Dumping Service Passwords
Hello Jason,
Try this one.
http://www.nirsoft.net/utils/lsa_secrets_dump.html
Hope that helps,
GoranP
-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com]
On Behalf Of Jason
Sent: Tuesday, November 21, 2006 1:19 PM
To: pen-test@lists.securityfocus.com
Subject: Windows 2003 - Dumping Service Passwords
I am currently conducting a penetration test and have compromised a Windows
2003 server which is a domain member server and have admin privs. I have
noticed the system has numerous services which are running through domain
accounts and some of those accounts are domain admins.
I understand the passwords for the services are stored in the LSA and I
would like to dump them. I have tried lsadump2 and this just hangs and
finally reboots the server. What other tools can I use on W2K3 to dump these
passwords?
I would prefer to use something that does not need to be installed with an
installer and does not require the server to be rebooted if that is
possible.
Any help appreciated.
J
________________________________________________________________________
____
________
Sponsored Link
Online degrees - find the right program to advance your career.
www.nextag.com
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=7016
0000
0008bOW
------------------------------------------------------------------------
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=7016
00000008bOW
------------------------------------------------------------------------
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=70160000
0008bOW
------------------------------------------------------------------------
__________ NOD32 1884 (20061127) Information __________
This message was checked by NOD32 antivirus system.
http://www.eset.com
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:22 EDT