RE: Access to a win NT box

["Davis, Matt" <matt.davis () countryfinancial com>]

If I remember correctly, you should be able to pull it off in a format that
LC3 can hammer on if you grab the file at
\\machinename\c$\winnt\system32\config

Alternately, you should be able to schedule a generation of the RDISK
information using

at \\machinename time "c:\winnt\system32\RDISK /S-"

Unless, of course, the administrator of the box pulled rdisk off of it.

Matt Davis, MCSA
Intermediate Client/Server Analyst
Client/Server Business Support
mailto:matt.davis () countryfinancial com



> -----Original Message-----
> From: Pedro Miranda [mailto:rpmiranda () sonae pt]
> Sent: Tuesday, June 25, 2002 11:43 AM
> To: pen-test () securityfocus com
> Subject: Access to a win NT box
>
>
>
>
> Hi, I've got remote access to a wNT box using the command
>
> \\machinename\c$ /user:machinename\administrator
>
> So i've got administrator privileges but i want to access to the SAM 
> database.
>
> I've tried to get \\winnt\repair\sam._ but i couldn't find the rdisk 
> comand.
>
> Can anybody help tell me where can i find this software, or if 
> there is 
> another way to get access to the sam file.
>
> Thanks in advance
>
> ---------------------------------------------------------------
> -------------
> This list is provided by the SecurityFocus Security 
> Intelligence Alert (SIA)
> Service. For more information on SecurityFocus' SIA service which
> automatically alerts you to the latest security 
> vulnerabilities please see:
> https://alerts.securityfocus.com/

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/