Penetration Testing mailing list archives

Re: SQL passwords


From: Elizabeth Greene <elizabeth.a.greene () gmail com>
Date: Tue, 27 Oct 2009 14:17:36 -0500

Cain will crack these.
http://pctechtips.org/pentesting-ms-sql-server-with-sqlat-and-cain/

where we could export the password hashes directly from our SQL
tables (sys.syslogins) and crack the passwords offline,

-ellie

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------


Current thread: