All Questions
4 questions
9
votes
2
answers
2k
views
What harm is there in obtaining password hashes in a Windows environment?
ArsTechnica posted this article recently talking about how the power grid has been penetrated:
Hackers lie in wait after penetrating US and Europe power grid networks
Excerpt:
One tactic involved ...
- 977
17
votes
3
answers
49k
views
Windows 7 Password Hash Security
I recently came across a number of sources that suggest that cracking Windows user account passwords is easy by examining their password hashes.
I understand that these hashes are stored in the SAM ...
- 273
5
votes
2
answers
33k
views
NTLM/LM Hashes on Domain Controller
I've noticed that when extracting password hashes from a domain controller (using Elcomsoft proactive password auditor) sometimes I'll get LM and NTLM hashes and other times I'll only get NTLM hashes.
...
- 11.5k
4
votes
1
answer
2k
views
Hashed passwords for NTLM authentication
I understood that Windows users' password hashes can be exported very easily. Right? So my question is:
If I can have the hashes of other user accounts (e.g. local users on my Windows machine), isn't ...
- 41