• Michael Meierruth (3/6/2013)


    paul.knibbs (3/6/2013)


    SQLCharger (3/6/2013)


    Guys,

    Would this also work with Windows hashes as well?

    That would be even more scary (if someone manages to get your Windows hash from a server). :unsure:

    There's no reason why it wouldn't, but getting the Windows hash of your password from the server isn't a trivial thing--you usually need admin access in order to read the SAM database, and if you already have that level of access, why do you care about hacking somebody else's password?

    It's for finding those people who use the same password everywhere else...

    And naughty people who want to steal/sell sensitive data, but do it with someone else's name in the audit log so some poor innocent bloke gets fired instead of the real criminal.

    Ben

    ^ Thats me!

    ----------------------------------------
    01010111011010000110000101110100 01100001 0110001101101111011011010111000001101100011001010111010001100101 01110100011010010110110101100101 011101110110000101110011011101000110010101110010
    ----------------------------------------