Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to do password length audit of domain password using offline brute force analysis. I cannot find any domain hashes from local machines , I want an approach where i can retrieve these hashes either though AD database file or by running some hashing retrieval tool.

Can someone please guide me how could this be done? I'm using l0phtcrack as password auditing tool.


share|improve this question

closed as not constructive by rook, LamonteCristo, AviD Apr 19 '12 at 18:10

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

It's explained in the l0phtcrack documentation.

Your options for obtaining the hashes are:

  • Import From Local Machine in l0phtcrack
  • Import From Remote Machine in l0phtcrack
  • Manually copying the SAM file and uploading it (no good in Windows 2008)
  • Importing the results of running PWDUMP3
  • Sniffing network login attempts

So, assuming you have sufficient privileges, you should be able to grab the hashes directly from the l0phtcrack application.

share|improve this answer
Lovely. +1 from me – Rory Alsop Apr 18 '12 at 13:09

Not the answer you're looking for? Browse other questions tagged or ask your own question.