RE: LC4 (L0phtCrack) error "Couldn't open SAM\Domains\Account\Use rs in SAM file. Possibly improper format."

From: MACRIDES,NATHAN (HP-Australia,ex3) (nathan.macrides@hp.com)
Date: Wed Apr 16 2003 - 20:24:25 EDT


Have you tried using regback to export the SAM? you should give it a try and
see if you get any different results.

Regards

Nathan

-----Original Message-----
From: flexicon33@yahoo.com [mailto:flexicon33@yahoo.com]
Sent: Wednesday, April 16, 2003 2:25 PM
To: pen-test@securityfocus.com
Subject: LC4 (L0phtCrack) error "Couldn't open SAM\Domains\Account\Users in
SAM file. Possibly improper format."

Hi,
I'm trying to import some SAM files into LC4, and for some reason LC4
doesn't like the format. I get the above error for any of 5 SAM files I'm
trying.

For a pen test, I got these sam files by senging a 'tptp put' command to
the SQL server (had no 'sa' password) so the SAM files were sent to my tftp
server. There were 5 of these servers, so I got 5 SAM files to try. LC4
doesn't like any of them.

However, LC4 works for other SAM files... I tested with my own SAM file
(w2k) and also another I downloaded from a machine via an http exploit...
LC4 had no problems opening those 2 and working on them.

Why does LC4 complain about these other SAM files? Does some other sam
format exist or did they get mangled somehow?
Thanks...
Flexicon33, CISSP

---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the
world's premier event for IT and network security experts. The two-day
Training features 6 hand-on courses on May 12-13 taught by professionals.
The two-day Briefings on May 14-15 features 24 top speakers with no vendor
sales pitches. Deadline for the best rates is April 25. Register today to
ensure your place. http://www.securityfocus.com/BlackHat-pen-test
----------------------------------------------------------------------------

---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the
world's premier event for IT and network security experts. The two-day
Training features 6 hand-on courses on May 12-13 taught by professionals.
The two-day Briefings on May 14-15 features 24 top speakers with no vendor
sales pitches. Deadline for the best rates is April 25. Register today to
ensure your place. http://www.securityfocus.com/BlackHat-pen-test
----------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:32 EDT