Simple script to swap hashes in SAM ..

[John Nash <rootsecurityfreak () gmail com>]

Hello List,

While trying some post exploitation, one of the major issues i guess is to
login to the system as a user over rdp.

We can do this in a couple of ways:


   1. create a new user <--- will create alarms
   2. change the password of existing user


in case of (2) i was wondering would it be possible to just swap the
existing hash with a new one (we now the password which hashes to this one)
.... then do all we need to on the remote system ....
then just replace the old hash for the original password back into the SAM.

Is there any reason why this should not be possible? If yes, a meterepreter
script could do this job very easily ....

thoughts?

Rgds,

jn

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework