Pwdump

Description

Pwdump7 uses rkdetector engine to dump the SAM and SYSTEM files from the system and extracts password hashes. This tool also allows users to dump files whose ACL deny access.

Installation

• Download link: http://www.tarasco.org/security/pwdump_7/pwdump7.zip

Usage

Usage: pwdump7.exe [options]

Note

Without option, pwdump will dump system password

Options

-s <samfile> <systemfile>

Dump passwords from files

-d <filename> [destination]

Copy filename to destination

-h

Show help

Example

C:\Documents and Settings\malware\Bureau\pwdump7>PwDump7.exe
Pwdump v7.1 - raw password extractor
Author: Andres Tarasco Acuna
url: http://www.514.es

Administrateur:500:B0347EB22B87E3F1AAD3B435B51404EE:711EFD7CDC285C11DDFAE2B3D9861DB1:::
Invité:501:NO PASSWORD*********************:NO PASSWORD*********************:::
HelpAssistant:1000:6C34BBCD28DD6A8A56088AD6CEFC1BFB:D474527929F6B428B7EA2F7C8B79CE5A:::
SUPPORT_388945a0:1002:NO PASSWORD*********************:AAB42B496473C917825C842BEACF0B75:::
malware:1003:NO PASSWORD*********************:31D6CFE0D16AE931B73C59D7E0C089C0:::