Penetration Testing mailing list archives
Re: Format of SAM File
From: Tim <tim-pentest () sentinelchicken org>
Date: Thu, 9 Jul 2009 14:30:11 -0700
Looking for a reference that describes the format of the windows SAM file. From what I can tell, the first column is the username and third column is the password hash, but I want to know what information is contained in the other columns. Google searches on "format windows SAM file", "understand windows SAM file", and other related searches have proved frustrating. I should mention that the SAM file was obtained using pwdump6 in case that is relevant. The format I am seeing is as follows: Username:number:password hash:another hash?:blank:blank:blank Any help is much appreciated.
The windows SAM file is a registry hive file. The format you're seeing above is some export by pwdump6 that is just some made up format representing a subset of what's in the registry. The Windows registry hive format is described here: http://sentinelchicken.com/research/registry_format/ Also, some of Brendan Dolan-Gavitt's tools and blog (http://moyix.blogspot.com/) posts may be helpful in figuring out what's what in SAM hives. tim ------------------------------------------------------------------------ This list is sponsored by: Information Assurance Certification Review Board Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified. http://www.iacertification.org ------------------------------------------------------------------------
Current thread:
- Format of SAM File Hernandez IV, Miguel (Jul 09)
- Re: Format of SAM File Ron (Jul 10)
- RE: Format of SAM File Pete.LeMay (Jul 10)
- Re: Format of SAM File Jeffrey Walton (Jul 10)
- Re: Format of SAM File Tim (Jul 10)
- Re: Format of SAM File Chris Brenton (Jul 10)
- Re: Format of SAM File David Howe (Jul 10)
- Re: Format of SAM File David Howe (Jul 10)
- Re: Format of SAM File Marc Ouwerkerk (Jul 10)
- RE: Format of SAM File Anthony Miracle (Jul 10)
- Re: Format of SAM File Ron (Jul 10)