Release of Pass-The-Hash Toolkit v1.4
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Release of Pass-The-Hash Toolkit v1.4
- From: "Hernan Ochoa" <hernan@xxxxxxxxx>
- Date: Wed, 2 Jul 2008 15:41:21 -0300
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:mime-version:content-type:content-transfer-encoding :content-disposition; bh=8qzXaMMsuAkMR0GVBrFuTRCeXsiwRay3l3NFwmiX+RI=; b=SFOht8r2m9gke6rFc+xsQ+izkXFhN9wZTHFfmY9vbMWU+mI9P7pqUOyC/+/3v7kz4G JxOeQfc7TDy6gm5VC7saVUFVSvBElXZpe+C6o+1bpk8bA9YXRcMH5dRkAAXff4DrtVD9 QSLPGInPyNqjXCPpFkKHMVu7JGaMqLEhEiNCM=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:mime-version:content-type :content-transfer-encoding:content-disposition; b=aJf+7/2N62eHazns29d2Pxn4Qzypyn9KrlW9gmMrcNew3J0XGW9qWt5F0/HH3/N8tg EERZKDg9/WXgKkaHsuGxdlTM7IMvwlvsNZFxkxl9rriPHD2GXkNjtJoKgKLJ2FbqzUIg 1IffJ+ubw6+A9cFMWiR+urBNusiQogLj5wrTg=
- List-help: <mailto:bugtraq-help@securityfocus.com>
- List-id: <bugtraq.list-id.securityfocus.com>
- List-post: <mailto:bugtraq@securityfocus.com>
- List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
- List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
- Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Source Code:
http://oss.coresecurity.com/pshtoolkit/release/1.4/pshtoolkit_v1.4-src.tgz
Win32 Binaries:
http://oss.coresecurity.com/pshtoolkit/release/1.4/pshtoolkit_v1.4.tgz
Documentation/info:
http://oss.coresecurity.com/projects/pshtoolkit.htm
http://oss.coresecurity.com/pshtoolkit/doc/index.html
http://hexale.blogspot.com
http://www.hexale.org/forums
What's new?:
(http://oss.coresecurity.com/pshtoolkit/release/1.4/WHATSNEW)
*Support for XP SP 3 for whosthere/iam (whosthere-alt/iam-alt work on xp sp3
without requiring any update)
*New -t switch for whosthere/whosthere-alt: establishes interval used
by the -i switch (by default 2 seconds).
*New -a switch for whosthere/iam: specify addresses to use. Format:
ADDCREDENTIAL_ADDR:ENCRYPTMEMORY_ADDR:FEEDBACK_ADDR:DESKEY_ADDR:LOGONSESSIONLIST_ADDR:LOGONSESSIONLIST_COUNT_ADDR
(WARNING!: if you use the wrong values the system may crash)
The idea is that, if you find yourself in a version of Windows where
whosthere/iam don't work (and iam-alt/whosthere-alt don't work
either); you can run LSASRV.DLL thru IDA, run the PASSTHEHASH.IDC
script included in the Pass-The-Hash toolkit, and use the addresses
found by the script with the -a switch.
This basically allows you to specify addresses at runtime to whosthere whithout
the need to recompile the tool.
*New -r switch for iam/iam-alt: Create a new logon session and run a
command with
the specified credentials (e.g.: -r cmd.exe)
*genhash now outputs hashes using the LM HASH:NT HASH format
*several bugfixes and stuff