Penetration Testing mailing list archives

Re: Query for blank passwords in Active Directory


From: "SD List" <list () security-database com>
Date: Thu, 5 Apr 2007 18:29:17 +0200 (CEST)

Try this utility
http://download.softerra.com/files/ldapbrowser26.msi

I've used it during penetration tests. It enumerates users and a lot of
information.
Give it a try.
Otherwise a linux good tool here http://www-unix.mcs.anl.gov/~gawor/ldap/

SD team

Hi all,

Is there any way to get a list of Active Directory users with blank
passwords? Of course, I'm attempting to discover such user accounts with
domain admin privileges.

Best Regards,
Igor

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------





------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


Current thread: