Penetration Testing mailing list archives

Re: [PEN-TEST] PWDump3


From: "Beauregard, Claude Q" <CQBeauregard () AAAMICHIGAN COM>
Date: Wed, 24 Jan 2001 11:58:44 -0500

I noticed that when I use PWDUMP3 against a domain of 500 users and load the
file into L0phtcrack 2.52 the file is read however when I run the dump on a
domain of 800 or more and try to load the file in L0phtcrack it crashes. At
this point I 'm not sure if it a problem with L0phtcrack or PWDUMP3

-----Original Message-----
From: Penetration Testers [mailto:PEN-TEST () SECURITYFOCUS COM]On Behalf
Of Thibodeaux, Mark
Sent: Wednesday, January 24, 2001 10:21 AM
To: PEN-TEST () SECURITYFOCUS COM
Subject: Re: [PEN-TEST] PWDump3


PWDUMP3 works, but it still needs refinement. It seems to be limited in
the number of users it can dump, probably because it is using the
registry to transfer the dumped passwords. During a test on a Windows
2000 Domain Controller with some 20,000 users it quit about halfway
through. It also did not successfully remove itself from the target
machine in this test. It worked fine on a Windows 2000 Professional
workstation.

                 -----Original Message-----
                From:   Penetration Testers
<PEN-TEST () SECURITYFOCUS COM>@ENRON
[mailto:IMCEANOTES-Penetration+20Testers+20+3CPEN-TEST+40SECURITYFOCUS+2
ECOM+3E+40ENRON () ENRON com]  On Behalf Of "Cintron, Jose"
<jcintron () IMSIDC COM>
                Sent:   Tuesday, January 23, 2001 5:36 PM
                To:     PEN-TEST () SECURITYFOCUS COM
                Subject:        Re: [PEN-TEST] PWDump3

                I downloaded it and tried it...  Now you can Dump the
Passwords from a
                remote machine (assuming you have enough privileges).
That's all I've seen
                so far, but trust me it does work.

                


Current thread: