RE: AD password Auditing

From: Lohan Spies (lohan.spies@ifs-sa.co.za)
Date: Mon Aug 08 2005 - 07:53:58 EDT


Hi there,

Thanks for all the replies; it already helped me a lot.

I just have a few more questions.

I only have physical access to the DC. No admin password etc!

Meaning that I can use a live cd like auditor to get access to the files on
the DC. I want to audit all AD accounts, not only the local accounts on the
box.

Everytime I tested this now it only dumped the local accounts and not the
users in the AD as well.

Thanks

Lohan

-----Original Message-----
From: Tonie [mailto:tonied@skowt.com]
Sent: 06 August 2005 08:27 AM
To: 'Lohan Spies'; pen-test@securityfocus.com
Subject: RE: AD password Auditing

Hi,

Try LCP... powerful and its free.

http://www.lcpsoft.com/english/index.htm

Regards
Tonie Deen
Skowt Security

-----Original Message-----
From: Lohan Spies [mailto:lohan.spies@ifs-sa.co.za]
Sent: 05 August 2005 01:43 PM
To: 'pen-test@securityfocus.com'
Subject: AD password Auditing

Hi there,

I want to know how can I copy the AD (Active Directory) database so that I
can run a password cracking tool against the accounts?

Could someone please point me in the right direction regarding the tools to
use and how to copy the db?

Thanks

----------------------------------------------------------------------------

--
FREE WHITE PAPER - Wireless LAN Security: What Hackers Know That You Don't
Learn the hacker's secrets that compromise wireless LANs. Secure your
WLAN by understanding these threats, available hacking tools and proven
countermeasures. Defend your WLAN against man-in-the-Middle attacks and
session hijacking, denial-of-service, rogue access points, identity
thefts and MAC spoofing. Request your complimentary white paper at:
http://www.securityfocus.com/sponsor/AirDefense_pen-test_050801
----------------------------------------------------------------------------
---
----------------------------------------------------------------------------
--
FREE WHITE PAPER - Wireless LAN Security: What Hackers Know That You Don't
Learn the hacker's secrets that compromise wireless LANs. Secure your
WLAN by understanding these threats, available hacking tools and proven
countermeasures. Defend your WLAN against man-in-the-Middle attacks and
session hijacking, denial-of-service, rogue access points, identity
thefts and MAC spoofing. Request your complimentary white paper at:
http://www.securityfocus.com/sponsor/AirDefense_pen-test_050801
----------------------------------------------------------------------------
---
------------------------------------------------------------------------------
FREE WHITE PAPER - Wireless LAN Security: What Hackers Know That You Don't
Learn the hacker's secrets that compromise wireless LANs. Secure your
WLAN by understanding these threats, available hacking tools and proven
countermeasures. Defend your WLAN against man-in-the-Middle attacks and
session hijacking, denial-of-service, rogue access points, identity
thefts and MAC spoofing. Request your complimentary white paper at:
http://www.securityfocus.com/sponsor/AirDefense_pen-test_050801
-------------------------------------------------------------------------------


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:43 EDT