SecurityFocus

Discovering Active Direcory users with blank passwords Apr 02 2007 04:43PM
igor mamuzic koncar-inem hr (5 replies)

Discovering Active Direcory shared or Service users account Apr 03 2007 02:25PM
Biassoni Riccardo (r biassoni reply it) (3 replies)

Re: Discovering Active Direcory shared or Service users account Apr 04 2007 12:59PM
Chris Costantino (clckct yahoo com)

RE: Discovering Active Direcory shared or Service users account Apr 03 2007 05:53PM
Talkovic, Scott A. (satalkov uci edu) (1 replies)

RE: Discovering Active Direcory shared or Service users account Apr 08 2007 02:00AM
David LeBlanc (dleblanc mindspring com)

Re: Discovering Active Direcory shared or Service users account Apr 03 2007 03:18PM
James (njan) Eaton-Lee (james mailing gmail com)

RE: Discovering Active Direcory users with blank passwords Apr 03 2007 02:04PM
Goran Pizent (goran pizent mobilnet hr)

Dump the passwords (pwdump, Abel and Cain...) from SAM and crack them.
Or use Microsoft's MBSA to recover weak passwords.

Alternate way is to use Hydra but since you have access to DC then that is
not necessary.

Goran Pizent

-----Original Message-----
From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On
Behalf Of igor.mamuzic (at) koncar-inem (dot) hr [email concealed]
Sent: 2. travanj 2007 18:43
To: focus-ms (at) securityfocus (dot) com [email concealed]
Subject: Discovering Active Direcory users with blank passwords

Is there a way to discover Active Directory users with blank passwords if I
have domain admin privileges and local access to my domain controllers?

Best Regards,
Igor

[ reply ]

RE: Discovering Active Direcory users with blank passwords Apr 02 2007 07:55PM
Kunz, Jeffrey T. (JKunz foley com) (1 replies)

Re: Discovering Active Direcory users with blank passwords Apr 03 2007 12:03AM
Kevin Gay (rot_betruger sbcglobal net) (2 replies)

Re: Discovering Active Direcory users with blank passwords Apr 03 2007 02:17PM
Raoul Armfield (armfield amnh org)

Re: Discovering Active Direcory users with blank passwords Apr 03 2007 02:01PM
pimp mastermind (gbchustla gmail com)

RE: Discovering Active Direcory users with blank passwords Apr 02 2007 07:51PM
eric (eric ch13-12westtex org)

Re: Discovering Active Direcory users with blank passwords Apr 02 2007 06:46PM
c0d3w12 c0d3w12 (c0d3vv12 gmail com)