Penetration Testing mailing list archives

Re: pwdump 2 & 3


From: IndianZ <indianz () indianz ch>
Date: Wed, 15 Dec 2004 21:41:51 +0100

Hi

Well it is possible, that logon-information is not cached locally (I mean, only in memory) for security reasons. Seems 
like you have to get the SAM (with all domain-users inside) from a domain-controller ;-)... Did you check for other 
SAM-files in the local filesystem (%windir%\repair)?

GreetZ from IndianZ

mailto:indianz () indianz ch
http://www.indianz.ch


On Wed, 15 Dec 2004 19:17:19 +0100
Guillaume Lavoix <glavoix () altadis com> wrote:

Hello,

Does anyone knows if it is posible with pwdump to get the information
About a logged on user.

For instance, If I log on my computer, I use a domain logon, and when I
execute pwdump I only see local user....

Any idea ?

Thanks for your help,

Sincerely,
Guillaume


Current thread: