Running PWDump3 on a live system

[ZLorca]

I need to get a dump of our SAM to test passwords and some pwcrackers for
our security team and was wondering if any problems like crashing the server
or corrupting the SAM occurred running utilities like PWDump3 against live,
Win2K production systems.

 

[Gerard Bok]

I need to get a dump of our SAM to test passwords and some pwcrackers for
our security team and was wondering if any problems like crashing the server
or corrupting the SAM occurred running utilities like PWDump3 against live,
Win2K production systems.

If you want to test something you should obey the first rule of
security: never ever test something against a live system.

That's where a lab environment is ment for

 

[someguy]

I've run it against a zillion systems and never had it blow anything up
Not a single problem.

You may find that it leaves some files on the server that are a dea
giveaway that someone is using pwdump3. Delete 'em when you're don

*I need to get a dump of our SAM to test passwords and som
pwcrackers for
our security team and was wondering if any problems like crashing th
server
or corrupting the SAM occurred running utilities like PWDump3 agains
live,
Win2K production systems.

-
somegu

 

[Jonathan]

PWdump4 is available as well and works fine on W2K/NT over the network