鬼仔's Blog

作者：isno

本地密码CRACK工具v0.1

下载地址：http://isno.ys168.com/ 文件名：lapc.rar

用途：在某些系统上获得了users权限，但有又没其他办法提权，可以试试用这个小工具在对方电脑（不是在自己电脑跑）跑一下管理员密码。
阅读全文 »

信息来源：WEB安全手册
作者：sid

SQL Server 2000:-
SELECT password from master.dbo.sysxlogins where name=’sa’
0×010034767D5C0CFA5FDCA28C4A56085E65E882E71CB0ED250341
2FD54D6119FFF04129A1D72E7C3194F7284A7F3A

0×0100- constant header
34767D5C- salt
0CFA5FDCA28C4A56085E65E882E71CB0ED250341- case senstive hash
2FD54D6119FFF04129A1D72E7C3194F7284A7F3A- upper case hash
crack the upper case hash in ‘cain and abel’ and then work the case sentive hash
阅读全文 »

信息来源：Tr4c3

It’s now possible for us to do sniffing oracle 11g password and cracking at the same time. If the old version of Cain & abel doesn’t support oracle 11g , just try the newest version of it , Cain & Abel 4.9.25 . It supports oracle 11g sniffing and password extractor. The thing that makes it works is the new module for Oracle TNS 11g (AES-192) in Oracle TNS sniffer filter has been recently added.
阅读全文 »