pwdump is the name of various Windows programs that output the
LM and
NTLM password hashes of local user accounts from the
Security Account Manager
(SAM). In order to work, it must be run under an Administrator account,
or be able to access an Administrator account on the computer where the
hashes are to be dumped. Pwdump could be said to compromise security
because it could allow a malicious administrator to access user's
passwords. Most of these programs are
open-source.
- pwdump - original program by Jeremy Allison (public domain, source available)
- pwdump2 - by Todd Sabin of Bindview (GPL), uses DLL injection
- pwdump3 - by Phil Staubs (GPL), works over the network
- pwdump3e - by Phil Staubs (GPL), sends encrypted over network
- pwdump4 - by bingle (GPL), improvement on pwdump3 and pwdump2
- pwdump5 - by AntonYo! (freeware)
- pwdump6 - by fizzgig (GPL), improvement of pwdump3e
- fgdump - by fizzgig, improvement of pwdump6 w/ addons
- pwdump7 - by Andres Tarasco (freeware), uses own filesystem drivers
- Openwall password tools - with copies of pwdump, pwdump2, pwdump3, pwdump3e, pwdump4, pwdump5, pwdump6, fgdump, and pwdump7
0 Comments
Good day precious one, We love you more than anything.