| 释义 |
- History
- Notes
- References
- External links
{{lowercase|title=pwdump}}pwdump is the name of various Windows programs that output the LM and NTLM password hashes of local user accounts from the Security Account Manager (SAM). In order to work, it must be run under an Administrator account, or be able to access an Administrator account on the computer where the hashes are to be dumped. Pwdump could be said to compromise security because it could allow a malicious administrator to access user's passwords. HistoryThe initial program called pwdump was written by Jeremy Allison. He published the source code in 1997 (see open-source).[1] Since then there have been further developments by other programmers: - pwdump (1997) — original program by Jeremy Allison.{{sfn|Allison|2012}}
- pwdump2 (2000) — by Todd Sabin of Bindview (GPL), uses DLL injection.{{sfn|SecuriTeam.com|2017}}
- pwdump3 — by Phil Staubs (GPL), works over the network.{{citation needed |date=June 2017}}
- pwdump3e — by Phil Staubs (GPL), sends encrypted over network.{{citation needed |date=June 2017}}
- pwdump4 — by bingle (GPL), improvement on pwdump3 and pwdump2.{{citation needed |date=June 2017}}
- pwdump5 — by AntonYo! (freeware).{{citation needed |date=June 2017}}
- pwdump6 (c. 2006) — by fizzgig (GPL), improvement of pwdump3e. NO source code.Foofus.Net|2008}->{{citation needed |date=June 2017}}
- fgdump (2007) — by fizzgig, improvement of pwdump6 w/ addons. No source code.Foofus.Net (2)}->{{citation needed |date=June 2017}}
- pwdump7 — by Andres Tarasco (freeware), uses own filesystem drivers. No source code.}->{{citation needed |date=June 2017}}
Notes{{refimprove|date=June 2017}}1. ^{{harvnb|Allison|2012}} see pwdump.c
References- {{cite web |last=Allison |first=Jeremy |title=Index of /pub/samba/pwdump |website=Samba |date=30 September 2012 |url=http://samba.org/samba/ftp/pwdump/ |ref=harv|access-date=15 June 2017}}
{{cite web |last=Sabin |first=Todd |title=New version of PWDump2 allows dumping of password hashes Active Directory |website=SecuriTeam.com | date=1 February 2017 |url=http://www.securiteam.com/tools/5ZQ0G000FU.html | ref={{sfnref|SecuriTeam.com|2017}} |access-date=15 June 2017}}External links- Openwall password tools - with copies of pwdump, pwdump2, pwdump3, pwdump3e, pwdump4, pwdump5, pwdump6, fgdump, and pwdump7
{{Security-software-stub}} 4 : Windows security software|Cryptographic attacks|Free security software|Command-line software |