windows

OrakelCrackert

Ma, 02/10/2007 - 12:37 — OeX

autor:

vonjeek[at]thc.org

descripcion:

OrakelCrackert is a tool that can crack passwords which are stored using the latest SHA1 based password hashing algorithm. To speed up cracking, the tool exploits a weakness in the Oracle password storage strategy. Therefore, cracking - for most passwords - is still just as fast as it was before the introduction of Oracle 11g.

link:

http://www.thc.org/

windows

cachedump 1.2

Ma, 17/07/2007 - 16:15 — OeX

autor:

Thales Security Systems (TSS)

descripcion:

Esta es una de esas utilidades que siempre deberías llevar encima

Recovering Windows Password Cache Entries
Summary

=======

Users authenticate themselves on a Domain Controller (DC) using NTLM/NTLMv2.

However the DC sometimes goes offline or the network cable is unplugged; in

this situation, the Local Security Authority System Service (LSASS) uses

password cache entries from the registry to perform offline logon.

This whitepaper explains the technical issues underneath Windows password

cache entries, which are undocumented by Microsoft. This paper aims at:

Helping pentesters or security bso retrieving the password cache entries
(hash value) for auditing purposes;
Providing more compatibility for programs that may require access to
these entries without using the LSA API.