my friend had told me that if i will give him an access to a computer in a network he could take out the passwords and users from that computer and scan with them the whole network for different vurlnbilties with what he got in first time... is it possible?!

I think your friend wants to run pwdump2 on one PC in the network and crack the passwords with L0phtcrack.

If all the PC's in the network have the same Administrator password he can use dameware/psexec.exe to hack them all.

This is called Network hack

with what encryption are the passwords encrypted and how long does it take for l0pht to crack em usually?

may take a long time (days) but usually no longer then a few hours. What encryption i don't know, L0phtcrack checks the NT password hashes.

You have to be very lucky to find a network where this hack works thought. Sharing has to be enabled.

its md5 i belive?
crack it with that LC4 appie, used it sometime with the dic in it and it took like 3secs and it cracked around 20% of all passes, which is good.

10q all! and my friend.. ill kill him! hehe

anyone know the command rcp whith dos ?

How i can Hack a lan whith that ?

not MD5, it uses its own proprietary hashing called LM hashes.....
its quite easy to do....

I can crack 99% of LM hashes (Windows NT passwords) for an alpha numeric password in under 3 minutes. It's with a utility called rcrack (rainbow crack, rainbow tables, etc.) I pull the hash with a "pwdump2.exe >> file.txt" then I take the file.txt and run rcrack to crack the passwords. The tool is priceless.

The idea is you pregenerate all the possible passwords then crack them when you have the time. It requires weeks to precompute the tables, but most crackers/hackers will already have them. So it's a good idea to use MORE than just alpha-numeric.

I generated the table to see if I could find a 1% password in alpha-numeric that couldn't be cracked using this utility. It is hard to find one that is easy to remember though. The auditing possibilities are pretty straightforward. If you want to get a password that cannot be cracked with this utility, then the only way to find one is to get this utility.

Another thing it will do is find partial passwords (to some extent) and from there you're on your own. I don't think there is anywhere where you can download the tables pregenerated. I think I had 5 of them and they are all like 1.2 gig in size (600 meg compressed).

Eventually though, I could see people selling bootable DVDs that could boot up, pull the SAM with pw2dump.exe and then crack the password on a machine. Which would be pretty crazy. I've also heard that there are some sites out there that will let you submit the .txt output from pwdump2 and will email you the cracked passwords. I was actually thinking about making a web utility like this myself, for myself.

With the latest version of rainbow crack, you can pre-compute md5 hashes. This might take longer and require more HD space, but the possibilities are then endless. I might take this project on as my next big one.

Yorn, SecureIT.co.il is doing a rainbow crack project. Members are asked to crunch one or more charset's (distributed computing) untill all charset's are done (I believe a total of 119GB).
When this is all done you can submit your LM Hashes and get the passwords in less then a few minutes.

Wow, that's pretty crazy of them. I'm going to check it out. I don't know how they intend to store all that data. Maybe they are going to compress it. I think the MD5 all would be more useful than the lmhash anyway.

Actually, that's more than crazy. That's just downright INSANE. There's no reason to do more than alphanumeric or alphanumeric14 (the next one). "All" is just plan stupid.

i think he just wanne scan with a exploit scanner...

okay this is really n00bish i know but i'm sure its probobly easy to do, ok my roommate doesn't think i can hack into his computer its the same model as mine and our computers are connected on wireless p2p network, i know his username and password and ip so i could just get on it but i wanna do it sneaky like, file sharing is disabled on c drive so is there a way i can get around that? i was reading on somewhere about using telenet to ftp or something, help would be great!

Can anyone please give me his tables? i cant do such a big table lake 1.2GB... its to big and long... any chance to get one?
BTW
i still didnt got the idea(there are some stupid peoples, yes) after i got the password uncoded and the user name what can i do with them to test the vurlnblities of the network? can you please be more specified?
10x 4 all the helpers

[B]RCP[/U] Just runs dos commands on a remote computer

The syntax is : rcp computer username password command

Here is another method related to LAN

chris thanks for the info!
this command looks very intresting

doesn't windows convert all passwords to upper case when encrypted? thus making lower case table generation obsolete.

p.s: i just picked it up here, ill check it out with my computer if my pass is case sensitive...

u can diagnoz the Encrypted password's with LC4.

no luck for me when trying psexec on remote so i will give a try as suggested by chris105. thank you chris105.

more links for arguments, guys

hmm.. Is it possible to crack the passwords from MYSQL which are encrypted???
What progs should I use?