As part of various pen-tests we have been using the dumplsa program to dump the lsa secrets area. This program gives the unencrypted passwords of those services that were started via an account other than nt local system. it also displays what looks like the cached 'hashes" for previous logons. Can these hashes be fed into l0pht ?? Are they the same format as the readsmb hash ?? Anyon know of a way to feed these into l0phtcrack ? thanks Free, encrypted, secure Web-based email at www.hushmail.com IMPORTANT NOTICE: If you are not using HushMail, this message could have been read easily by the many people who have access to your open personal email messages. Get your FREE, totally secure email address at http://www.hushmail.com.
This archive was generated by hypermail 2b30 : Tue May 15 2001 - 22:10:51 PDT