Re: [PEN-TEST] Hard-coded passwords in WINNT directory?

[William Salusky <saluskyw () EBALANCE COM>]

This is the result of running an rdisk /s to write repair files locally (for
secure storage in a central location) :)

-----Original Message-----
From: Plague, Grandmaster [mailto:GrandmastrPlague () AOL COM]
Sent: Monday, November 27, 2000 3:19 PM
To: PEN-TEST () SECURITYFOCUS COM
Subject: Re: [PEN-TEST] Hard-coded passwords in WINNT directory?


In a recent pen-test,  I discovered a different configuration for where the
sam._ file may be. Instead of winnt/system32/repair/sam._ , this system had
it's sam._ file in winnt/repair/sam._  This was the first configuration I
had
seen like this. The sam._ files were intact. Just thought you might like to
give that a try.

Grandmaster Plague