Thanks for this - I recently came a cropper when McAfee on a DC detected l0phtcrack and LCP attempts, got its underwear in a twist and the lsass caused a reboot.
2009/12/28 Reed Arvin <[email protected]>: > Using WinScanX to retrieve Windows password hashes, LSA secrets and MS > CACHE hashes without copying a single file to the remote host. Read > on... > > Video and WinScanX (free) download link at: > http://windowsaudit.com/winscanx/retrieving-password-hashes-with-winscanx-y/ > _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
