Tool for extracting hashes from SAM/AD and active logon sessions. It can also extract LSA secrets.Works for both x86 and x64. Windows 2000 - 2008.
gsecdump v2.0b5 - Copyright (C) 2010 Johannes Gumbel, Truesec (www.truesec.com)
USAGE
gsecdump [OPTIONS]
OPTIONS
-h / --help
Show this text
-a / --dump_all
Dump all secrets
-s / --dump_hashes
Dump hashes from SAM/AD
-l / --dump_lsa
Dump LSA secrets
-u / --dump_usedhashes
Dump hashes from active logon sessions
-w / --dump_wireless
Dump Microsoft wireless connections
-S / --system
Force elevation to SYSTEM
DESCRIPTION
Extract security related information from Windows 2000/XP/2003/Vista/7/2008.
Both x86 and amd64 are supported.
LICENSE
Freeware
DISCLAIMER
The software is licensed "as-is". You bear the risk of using it.
Truesec gives no express warranties, guarantees or conditions.
IF YOU DO NOT ACCEPT THIS, DO NOT USE THE SOFTWARE.
Hash sums
57F222D8FBE0E290B4BF8EAA994AC641 MD5 gsecdump-v2b5.exe
4DD91591FACC744F1F9F56D613CD3F395F97F1A7 SHA1 gsecdump-v2b5.exe
94CAE63DCBABB71C5DD43F55FD09CAEFFDCD7628A0
2A112FB3CBA36698EF72BC SHA256 gsecdump-v2b5.exe
4E293CECB159814316921BF3D752179047556F9F5B9ABC021A7F
409CA04B08C7EA22767883ECCFB9CA503533C3F6E109 SHA384 gsecdump-v2b5.exe
332EF78378E17F2EE3C68840A5D624751D8CAC8798F0625F0B941A
E1B3DB145A5E3581E4A96E58751DEF4762D0F58BC211C4B9A02DF
8446C9D7E346A5BA4759A SHA512 gsecdump-v2b5.exe
54BFA56C71DB7CFA67F6B31B9B3AE427DFE06B4B RIPEMD160 gsecdump-v2b5.exe