This process injects a DLL into the LSASS system process or say parses the memory for specific patterns and inspect these memory pages content.
This can lead to a Blue Screen of Death (BSoD) condition following a crash of the LSASS process therefore this action is not recommended on production environments.
The following screen-shot shows the dump of SAM users with gsecdump on a Windows Server 2003 SP2 32-bit.
Use gsecdump.exe -s > dump.txt to dump into text file.
Password hashes dump tools
This can lead to a Blue Screen of Death (BSoD) condition following a crash of the LSASS process therefore this action is not recommended on production environments.
The following screen-shot shows the dump of SAM users with gsecdump on a Windows Server 2003 SP2 32-bit.
Use gsecdump.exe -s > dump.txt to dump into text file.
No comments:
Post a Comment