retrieving AD password via .net

  • Thread starter Thread starter stevenm
  • Start date Start date
S

stevenm

does anybody know if it's possible to retrieve a user's AD password via
a c# app?

tks
 
No, it is not possible to retrieve a users password using any method. The
only way you can get it is to perform a brute-force, offline hack where you
compare the hashes. It would be a huge security hole to read a password.
Why would you ever want to do such a thing?
 
Paul Williams said:
No, it is not possible to retrieve a users password using any method. The
only way you can get it is to perform a brute-force, offline hack where
you compare the hashes. It would be a huge security hole to read a
password. Why would you ever want to do such a thing?
Click to expand...

Agreed (including the final question).

Even the DCs don't usually "know" the passwords.


--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
 
As I understand, the password is not saved in AD, only the hash. A one-way
function is used to create the hash.

--
Richard
Microsoft MVP Scripting and ADSI
Hilltop Lab web site - http://www.rlmueller.net
--

Herb Martin said:
Paul Williams said:
No, it is not possible to retrieve a users password using any method. The
only way you can get it is to perform a brute-force, offline hack where
you compare the hashes. It would be a huge security hole to read a
password. Why would you ever want to do such a thing?
Click to expand...

Agreed (including the final question).

Even the DCs don't usually "know" the passwords.


--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
Click to expand...
 
Richard Mueller said:
As I understand, the password is not saved in AD, only the hash. A one-way
function is used to create the hash.
Click to expand...

That is the default.

Why would you WANT the password? What
legitimate application do you have in mind?

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
--
Richard
Microsoft MVP Scripting and ADSI
Hilltop Lab web site - http://www.rlmueller.net
--

Herb Martin said:
Paul Williams said:
No, it is not possible to retrieve a users password using any method. The
only way you can get it is to perform a brute-force, offline hack where
you compare the hashes. It would be a huge security hole to read a
password. Why would you ever want to do such a thing?
Click to expand...

Agreed (including the final question).

Even the DCs don't usually "know" the passwords.


--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]
Click to expand...
Click to expand...
 
You must log in or register to reply here.

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

VBA - retrieve data on last create named range from previous inserted named range 0
Asset Management - PC Birth Date 11
News Encrypted SSDs are not as secure as we thought 3
Synchronize users from AD to SQL-Server [password problem] 3
Windows Photo Viewer can’t display this picture because there might not be enough memory available on your computer. 3
Biometric USB Drive Recommendations 8
fully automatic ldap authentication 1
password expired on AD cannot login using cached pw on laptop 1

Back
Top