Re: Hashdump

[Matt Gardenghi <mtgarden () gmail com>]

Interesting.  That technique obtained the Administrator and Guest 
hashes.  There are other users on the box and not all of them are domain 
accounts.  Still it was better then what I had been getting.

Matt

On 4/16/2010 9:39 AM, HD Moore wrote:
> On 4/16/2010 7:57 AM, Matt Gardenghi wrote:
>    
> > Why would this be failing?  It seems as if MS has changed something to
> > fight back.  Also, I've been unable to open a shell on the box, once
> > I've elevated my privs to system: execute -f cmd.exe -c -t .
> >
> > Any pointers would be helpful.  Thanks.
> >      
> Try "run hashdump" to use the registry method, this only supports local
> accounts and not domains right now.
> _______________________________________________
> https://mail.metasploit.com/mailman/listinfo/framework
>    

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework