Re[2]: Win98 and NT4.0 passwords

mlynn@west.raytheon.com
Fri, 28 Aug 1998 09:59 -0700 (PDT)

• Next message: mlynn@west.raytheon.com: "Re: IRC (was Re: Crypto Coding Project)"
• Previous message: Martin Grap: "re: Win98 and NT4.0 passwords"

     Please help get me off your distribution list. I'm inundated with you
     guys' emails. I think I'm somehow 'attached' to the "CodherPlunks"
     address.

______________________________ Reply Separator _________________________________
Subject: re: Win98 and NT4.0 passwords
Author: mgrap@concord-eracom.de at mime
Date: 8/28/98 01:32 AM

At 04:02 PM 8/27/98 +0100, you wrote:
     
> I have been asked to look into how login can work on Win95, Win98,
>NT4.0. My question is on the password on Win98 and perhaps NT4.0. I was
>told that the password is encrypted, and I was wondering if there is a way
>for it to be decrypted.
>
> If there is a good place or book for reference on this that would be
>helpful also.
>
     
Have a look at
     
http://www.counterpane.com/pptp-paper.html
     
This paper describes some weaknesses in Microsofts pptp implementation.
As far as I remember the authors also describe the various protocols
used by Microsoft for client authentication. Another way of getting
information could be the source code of the Samba server. It implements
Microsoft's file and printer sharing on a Linux machine. I think it's
GPL'ed and therefore the source should be freely available.
     
Martin
     
     
--------
Martin Grap, Concord-Eracom Computer Security GmbH
Talstrasse 11, D-72218 Wildberg, Germany
Tel. : {+49} (0)7054-9267-0, Fax: {+49} (0)7054-1837
e-mail: mgrap@concord-eracom.de, CE-homepage: http://www.concord-eracom.de

RFC-822-headers:
Received: from CONVERSION-DAEMON by mail.hac.com (PMDF V5.1-10 #26245)
 id <0EYE00501A9LIF@mail.hac.com>; Fri, 28 Aug 1998 03:24:58 -0700 (PDT)
Received: from PROCESS-DAEMON by mail.hac.com (PMDF V5.1-10 #26245)
 id <0EYE00501A9LIC@mail.hac.com>; Fri, 28 Aug 1998 03:24:57 -0700 (PDT)
Received: from fw-tu05.hac.com by mail.hac.com (PMDF V5.1-10 #26245)
 with ESMTP id <0EYE0050EA9KCA@mail.hac.com>; Fri,
 28 Aug 1998 03:24:57 -0700 (PDT)
Received: from toad.com ([140.174.2.1]) by fw-tu05.hac.com (8.9.0/8.9.0)
 with ESMTP id DAA26360; Fri, 28 Aug 1998 03:13:38 -0700 (MST)
Received: (from Received: (from majordom@localhost) by toad.com (8.7.5/8.7.3)
 id BAA01740 for CodherPlunks-outgoing; Fri, 28 Aug 1998 01:26:11 -0700 (PDT)
Received: from concord-eracom.de ([193.155.251.2]) by toad.com (8.7.5/8.7.3)
 with ESMTP id BAA01735 for <CodherPlunks@toad.com>; Fri,
 28 Aug 1998 01:26:08 -0700 (PDT)
Received: by mercur.concord-eracom.de id <35841>; Fri,
 28 Aug 1998 09:24:20 +0100
Date: Fri, 28 Aug 1998 09:32:24 +0100
From: Martin Grap <mgrap@concord-eracom.de>
Subject: re: Win98 and NT4.0 passwords
In-reply-to: <Pine.SUN.3.96.980827105751.959I-100000@sunflash.eng.usf.ed u>
Sender: owner-CodherPlunks@toad.com
X-Sender: X-Sender: mgrap@mercur
Message-id: <98Aug28.092420gmt+0100.35841@mercur.concord-eracom.de>
MIME-version: 1.0
X-Mailer: Windows Eudora Pro Version 3.0.1 (32)
Precedence: bulk

• Next message: mlynn@west.raytheon.com: "Re: IRC (was Re: Crypto Coding Project)"
• Previous message: Martin Grap: "re: Win98 and NT4.0 passwords"