Penetration Testing mailing list archives

Re: Where are Windows "Enforce password history" passwords stored?


From: Jeffrey Denton <dentonj () gmail com>
Date: Mon, 29 Aug 2005 12:34:11 -0700

On 8/29/05, Jeffrey Denton <dentonj () gmail com> wrote:
On 8/28/05, Charles Gillman <charles.gillman () gmail com> wrote:
Can anyone tell me where the "remembered" passwords are stored when
the "Enforce password history" is set in Group Policy?

They are in the SAM.

http://www.derkeiler.com/Mailing-Lists/NT-Bugtraq/2003-07/0033.html


Also, http://www.cqure.net/tools.jsp?id=22:

"Patches that add the functionality of dumping password history hashes
to pwdump version 2 and 3."


Current thread: