Latest comments
In response to: Meterpreter Post exploitation - Recap
john brightman [Visitor] · http://www.whoismark.com
HI
looks very interesting!
bookmarked your blog.
john brightman
looks very interesting!
bookmarked your blog.
john brightman
In response to: Playing with LogMeIn and Hamachi
john brightman [Visitor] · http://www.whoismark.com
HI
looks very interesting!
bookmarked your blog.
john brightman
looks very interesting!
bookmarked your blog.
john brightman
In response to: Getting passwords from memory dumps
moyix [Visitor] · http://moyix.blogspot.com/
Hi,
Actually you can get mscache hashes as well using my tools :) Try:
volatility cachedump -f [memory_image] -y [system hive offset] -s [security hive offset] > Domain_hash.txt
And for LSA secrets:
volatility lsadump -f [memory_image] -y [system hive offset] -s [security hive offset] > lsa_dump.txt
-moyix
Actually you can get mscache hashes as well using my tools :) Try:
volatility cachedump -f [memory_image] -y [system hive offset] -s [security hive offset] > Domain_hash.txt
And for LSA secrets:
volatility lsadump -f [memory_image] -y [system hive offset] -s [security hive offset] > lsa_dump.txt
-moyix