full-disclosure - Windows Credentials Editor (WCE) v1.2 release

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Mon, 18 Apr 2011 09:43:00 -0300
From: Hernan Ochoa <hernan@...liasecurity.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Windows Credentials Editor (WCE) v1.2 release

New features in this version:
-g              Generate LM & NT Hash.
                Parameters: <password>.
-K              Dump Kerberos tickets to file (unix & 'windows wce' format)
-k              Read Kerberos tickets from file and insert into Windows
cache

Description:
Windows Credentials Editor (WCE) allows to list logon sessions and add,
change, list and delete associated credentials (ex.: LM/NT hashes and
Kerberos tickets). This can be used, for example, to perform
pass-the-hash on Windows, obtain NT/LM hashes from memory (from
interactive logons, services, remote desktop connections, etc.) which
can be used to perform further attacks, obtain Kerberos tickets and
reuse them in other Windows or Unix systems.

WCE v1.2 supports obtaining logon sessions and NTLM credentials just by
reading
memory without performing code injection.

Dumping Kerberos tickets and adding them to the Windows cache was tested
on Windows 7; your feedback is welcome.

Download:
http://www.ampliasecurity.com/research/wce_v1_2.tgz

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/