Windows Forum

Ask something
Discussion Locked

Cracking Win2000 domain passwords

0 helpful
3 replies

by loveanne 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Aside from pwdump2 that works if you are in the domain controller itself, do somebody know how to crack the Windows 2000 domain password in other ways or using other softwares? Say cracking it from the other Win2000-clients?

This is only for educational purposes and not for exploitation. Thank you very much in advance.

3 replies

by nsa13

If you have to use a Win2000 box to do it from try using PWDUMP3. You can get it at http://www.ebiz-tech.com/index.htm. PWDUMP3 adds Windows 2000 functionality. However, if you can use an NT box and the envrioment that your auditing is a mixed NT/2000 architecture than L0phtCrack will still be able to sniff out password hashes for you.

Most admins can't set the NTLMv2 setting on there networks because of some legacy app or a CEO wanting Windows98 on thier box, so the hashes are backwards compatible...even on 2000 boxes. =)

Worse case, you can enumerate the userlist via a null session (net use \\x.x.x.x\ipc$), grab the user list and then run NAT against the domain utilizing a brute force technique

Good luck on your audit.

This discussion is closed to new replies.