Windows 7 PWDUMP

Brought to you by: neinbrucke, quelrod

#25 Windows 7 PWDUMP

Status: open

Owner: nobody

Labels: None

Priority: 5

Updated: 2012-01-27

Created: 2012-01-27

Creator: Adam Esslinger

Private: No

I'm using fgdump to dump passwords on a Windows 7 x64 PC, I then use the -f option in rcarcki_mt and specify the file .pwdump file previously created. rcracki_mt outputs invalid LM/NTLM hash. If I open the .pwdump file and select the last part of the hash and use the -h option in rcracki_mt it will attempt to crack using NTML raindows tables. It seems that rcacki_mt cant distingish LM vs. NTLM/NT hashes. Attached is a sample .pwdump file. Again if I specify the hash of B9E0CFCEAF6D077970306A2FD88A7C0A using NTLM tables it will attempt to crack the password.

Discussion

Adam Esslinger - 2012-01-27

127.0.0.1.pwdump

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Windows 7 PWDUMP

Group

Searches

Help

#25 Windows 7 PWDUMP

Discussion