Date: Fri, 07 Apr 2006 11:58:09 +0100
From: Hari Sekhon <harisekhon@...il.com>
To:  john-users@...ts.openwall.com
Subject: Re: WINDOWS 2000 off line

the account is probably a domain one so you need to use cachedump 
instead of pwdump.

maneesh kohli wrote:
> Even I am facing the same problem....
>
> When I run pwdump4 on my local machine (Service Pack 4, Workstation) I
> do not get hash for my password, though it lists the hash for
> administrator's password. This is strange.
> Please help in sorting out this problem.
>
> Thanks
>
>
> On 23 Mar 2006 21:34:57 -0000, madfran <madfran@....alias.net> wrote:
>   
>> Hi,....
>>
>> I have some curiosity.
>>
>> The situation :
>> - Laptop DELL
>> - Windows 2000 Service Pack 4
>> - I have Administrator rights in this machine
>> - When I am in my office I connect to the network over domain authority
>> - When I am outside without network I start my laptop with the same user and
>>  password  ==> My password (or hash) is stored in my laptop
>>
>> The problem (or curiosity) :
>> - I run CAIN and try to discover my user identification in my laptop
>>  ==> not luck ! I see Administrator (for example) but not my identification
>> - I run LC5 (l0phtcrack) and I import hash from local machine
>>  ==> not luck ! All hash (included Administrator) but not my password hash
>> - I run cachedump
>>  ==> same results
>> - I run pwdump (version 6) against my laptop
>>  ==> I see more user ! (one is Administrator_history_0), but I don't see my
>>      user identification.
>>
>> Questions (only two) :
>> - Wicht is the system to see my own user (user and password hash) ?
>> - Why I see more user with pwdump than CAIN, LC5 or cachedump ?
>>
>> madfran
>>
>> --
>> To unsubscribe, e-mail john-users-unsubscribe@...ts.openwall.com and reply
>> to the automated confirmation request that will be sent to you.
>>
>>
>>     
>
>   

Hosted by DataForce ISP - Powered by Openwall GNU/*/Linux