Security Basics mailing list archives

Re: How does the Cain and Abel SAM dump works?


From: Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>
Date: Wed, 16 Jul 2008 17:26:21 +0200

On 2008-07-16 Patrick Webster wrote:
On newer Windows boxes the SAM is protected... but not from
LocalSystem :) PWDump3 is an example. It installs/dumps/uninstalls as
a Windows service.

You need admin privileges to install system services, in which case you
don't need to crack passwords anymore, because you can do anything
anyway.

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq


Current thread: