Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: [Full-disclosure] Tool release: extract Windows credentials from registry hives |
|---|---|
| Date: | Fri, 22 Feb 2008 07:05:04 -0500 |
"Two Things Infinite: The Universe and Human Stupidity" Albert Einstein Google Error Forbidden Your client does not have permission to get URL /files/creddump-0.1.tar.bz2 from this server. (Client IP address: xxx.xxx.xxx.xxx) You are accessing this page from a forbidden country. Why google code? Don't waste your time or others that want to download and use SourceForge, Codeplex, FSF, etc. and make them loose revenue. Is so laughable that even the license permits redistribution in the first place and mirroring it won't be a crime. And then proxies / bouncers / tunnels. But then why make you or your visitors loose time? Or... maybe Google want us to make mirrors without limitations of it's entire website and make us get the revenue they won't ;). Let us know google we are impatient to clone your SF takeover attempt sh... without restrictions. On 2/20/08, Brendan Dolan-Gavitt <bdolangavitt@wesleyan.edu> wrote:
CredDump is a new tool implemented entirely in Python that is capable of extracting: * LM and NT hashes (SYSKEY protected) * Cached domain passwords * LSA secrets It has no dependencies on any part of Windows, and operates directly on registry hive files. It is licensed under the GPL and intended to be easy to read, so you can find out how various Windows obfuscation algorithms work by reading the code. (I will also be posting a series of articles explaining the algorithms in detail on my blog in the coming weeks). You can download the tool at: http://code.google.com/p/creddump/ Or read a more detailed introduction at: http://moyix.blogspot.com/2008/02/creddump-extract-credentials-from.html CredDump is based on the hard work of many people, so please to read the credits section in the README. Cheers, Brendan _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Certification for Web Application Security Professionals, Anurag Agarwal |
|---|---|
| Next by Date: | Cold Boot Attacks on Disk Encryption, Jacob Appelbaum |
| Previous by Thread: | [Full-disclosure] Tool release: extract Windows credentials from registry hives, Brendan Dolan-Gavitt |
| Next by Thread: | [Full-disclosure] Advisory, advisories |
| Indexes: | [Date] [Thread] [Top] [All Lists] |