Pass-The-Hash Toolkit v1.2 is available.
What is Pass-The-Hash Toolkit?
The Pass-The-Hash Toolkit contains utilities to manipulate the Windows Logon Sessions mantained by the LSA (Local Security Authority) component. These tools allow you to list the current logon sessions with its corresponding NTLM credentials (e.g.: users remotely logged in thru Remote Desktop/Terminal Services), and also change in runtime the current username, domain name, and NTLM hashes (YES, PASS-THE-HASH on Windows!).
Direct download links:
source code:
http://oss.coresecurity.com/pshtoolkit/release/1.2/pshtoolkit_v1.2_src.tgz
binaries:
http://oss.coresecurity.com/pshtoolkit/release/1.2/pshtoolkit_v1.2.tgz
More info:
http://oss.coresecurity.com/projects/pshtoolkit.htm
http://oss.coresecurity.com/pshtoolkit/doc/index.html
what's new:
http://oss.coresecurity.com/pshtoolkit/release/1.2/WHATSNEW
10 comments:
The hardcoded addresses still have not been updated for 2003sp2?
LSASRV.DLL Location: C:\WINDOWS\system32\lsasrv.dll
LSASRV.DLL version: 00050002h. ECE0BE1h
Checking LSASRV.DLL....skipped. (-B was specified).
Trying to obtain addresses...Failed! (AC = 00000000, EM = 00000000)
probably not.
Send me an email to hernan[at]gmail.com, and I'll add them.
Thanks!,
Hernan
I don't have the addresses, was hoping you did. Is there a way to get them under ADA or whatever?
Yes, I DO have them.
Just drop me an email :).
by ADA you mean IDA?
whoops, yeah IDA. email coming up. why are they not in the latest release?
hey anonymous, I lost your email address, I have what you need, can you send me an email again? I'll send you the version of the toolkit you need.
why do you not just post an updated version with more addresses?
I did! v1.3 is out! and I also did a lot more things! check it out!
I was just asking you to send me an email so I could give you a pre-release version of the tools to solve your issues, that's all!
please let me know if the new version solves your issues, and if not, just send me an email, i'm not from the CIA! :) it just easier to send you pre-release versions than to release new versions everytime someone finds a problem with the tool. I give people special versions all the time, don't be afraid, send me an email :).
I have the same problem with the new version 1.3...
Trying to obtain addresses...Failed! (AC = 00000000, EM = 00000000)
Is there everyone who can help me ?
email me! hernan(at)gmail.com!
Post a Comment