Pwdump is for winnt / 2000 ... there is a program to dump user/password hash on windows server 2003 ????

you've got pwdump2 for win2k win XP, and win 2k3 locally,
and pwdump3 and pwdump3e for remote pw extraction.

just google for them, they can be found almost everywhere

Quick find on google indeed. Search for "pwdump3" and you should get this:

hxxp://vh224401.truman.edu/pub/win32/apps/pwdump3/

Enjoy yourself.

i test with pwdump4 but don't work on win 2003, but pwdump2 works fine .... Thx for reply

hello

I have a little prob with pwdump on 2K advanced machine
there is few domain and I have acces on the AD.

I have an error like this :

pwdump \\DOMAINC\admin$ failled !


but when I use pwdump it doesn't work
does any some one can help me ?

you have to be an admin when using pwdump, + the $admin share must exist



I've never got pwdump4 to work either, pwdump3v2 works great for me

admin$ share is ok.
I use pwdump by :

flash fxp (admin on servu)
radmin (telnet)
radmin (remote controle)

and there is always the same answer




I don't know what to do ...

plEx

pwdump2 should work with flashfxp/serv-u, even if the $admin share isnt enabled on the remote host.

you dont have access to den admin share.
i dont know why but its senseless to try it again and again...

you can also use another tool like pwdump...

http://www.insidepro.com/eng/saminside.shtml

thats a very nice tool, it has a gui, but i think thats not the problem

pwdump2 work fine for local system but if you want dump a complete domain pwdump4 is better.
For example if you have an admin domain account with a big network it s impossible to look one by one the machine. Then with pwdump4 you have just to build a little bash script to dump all the machine from the network.

It work very well

hmmmzzz

I get a encrypted password returned

Someone knows how 2 decript ?

Regards, Ghostrider

John Da Ripper is free (need ntlm patch)
@stake's L0phtcr@ck is the best but not free

rainbowcrack > *

whats the problem woth pwdump2 on a windows 2003 server?

Never had any probs, except on a Terminal Server, but thats because it cant create a remote thread, but if you run it in telnet or some other backdoor, it works just fine

google.com search for LM hash recovery, or check out the windows section of the forums... there are quite a few links there to have it done instantly.