Penetration Testing mailing list archives

Re: dumping hashes on box w/ Norton AV


From: H D Moore <sflist () digitaloffense net>
Date: Thu, 10 May 2007 17:18:49 -0500

The Metasploit 3 Meterpreter payload, with the "priv" extension, and the 
hashdump command. This avoids the AV by never writing to disk.

-HD

On Thursday 10 May 2007 17:03, Neil wrote:
How do you slip your tools past the AV when it flags and deletes them
on the spot?

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------


Current thread: