126 reputation
2
bio website
location
age
visits member for 3 years, 2 months
seen Nov 24 '14 at 15:07

Oct
10
awarded  Student
Oct
10
asked W2K8R2 - A way to convert effecitve Group Policy settings to import on stand-alone machines for local policy?
Sep
4
comment How are cached Windows credentials stored on the local machine?
meh.. to me this is mincing words. the nature of "hashing" is a one-way process that creates basically an obfuscated value of the password using a cryptographically secure algorithm. The problem is that MD4 may have been cryptographically secure 10-15 years ago but is not even close anymore (neither is MD5 or SHA1 from a cryptographer's standpoint). So, if you have present-day hardware that can quickly brute force the key space of the algorithm or uncover a collision, then you can easily derive the password from the hash...
Sep
4
comment How are cached Windows credentials stored on the local machine?
Offline password cracking in the SAM is completely different than hooking LSASS in memory as Mimikatz and WCE do. And depending on the password complexity, offline password cracking of the SAM can be VERY easy (see samdump2)
Sep
4
comment How are cached Windows credentials stored on the local machine?
"The NT hash of the password is calculated by using an unsalted MD4 hash algorithm." -- Straight from TechNet: technet.microsoft.com/en-us/library/hh994565(v=ws.10).aspx
Dec
13
awarded  Supporter