The Ethical Hacker Network - Safely Dumping Hashes from Live Domain Controllers

Latest Additions

Who's Online

EH-Net News Feeds

Latest Additions

EH-Net > Ethical Hacking Discussions and Related Certifications > Network Pen Testing (Moderator: don) > Safely Dumping Hashes from Live Domain Controllers

Pages: [1] Go Down

« previous next »

	Author	Topic: Safely Dumping Hashes from Live Domain Controllers (Read 1383 times)
0 Members and 2 Guests are viewing this topic.

3xban

Sr. Member

Offline

Posts: 373

Safely Dumping Hashes from Live Domain Controllers

« on: November 22, 2011, 11:50:14 AM »

Pretty good article from PaulDotCom site on utilizing Volume Shadow Copies to dump hashes from a live domain controller.

http://pauldotcom.com/2011/11/safely-dumping-hashes-from-liv.html

I was thinking about doing this with a new test box to see how difficult it would be. I imagine if you are already in the network and have already compromised it then this just might be salt in the wound for the system admins. Still nifty though.


	Logged

Certs: GCWN

Ignatius

Jr. Member

Offline

Posts: 91

Re: Safely Dumping Hashes from Live Domain Controllers

« Reply #1 on: November 22, 2011, 12:56:37 PM »

I saw this too and hoped to get time to play around in a virtual environment. I'll be interested to hear how you get on with it.

There are several comments in LaNMaSteR53.blog about this and, in particular, experiences of folks who have tried it out.