Description: uarks PwDump is a native Win32 tool to extract credentials Windows operating systems.
It currently extracts :
- Local accounts NT/LM hashes+ history
- Domain accounts NT/LM hashes+ history
- Cached domain password
- Bitlocker recovery information (recovery passwords & key packages)
Supported OS : XP/2003/Vista/7/2008/8
Why another hash dumper?
- No tools can actually dump all kind of hash, a combination of tools is always needed.
- We encounter some rare crash with libesedb library and some NTDS.dit files.
- We think it s safer to directly use Microsoft JET/ESE API for parsing s originally
built with same functions.
- Bitlocker case is added even if some specific Microsoft tools could be used to dump those information.
To Search:
File list (Check if you may need any files):
quarkspwdump-master
...................\CHANGELOG.txt
...................\MAKE.txt
...................\QuarksADDumper.sln
...................\README.md
...................\README.txt
...................\src
...................\...\QuarksADDumper.vcxproj
...................\...\QuarksADDumper.vcxproj.filters
...................\...\QuarksADDumper.vcxproj.user
...................\...\QuarksPwDump.cpp
...................\...\QuarksPwDump.rc
...................\...\app_icon.ico
...................\...\common.h
...................\...\crypt.cpp
...................\...\crypt.h
...................\...\globals.h
...................\...\include
...................\...\.......\openssl
...................\...\.......\.......\aes.h
...................\...\.......\.......\asn1.h
...................\...\.......\.......\bio.h
...................\...\.......\.......\bn.h
...................\...\.......\.......\crypto.h
...................\...\.......\.......\des.h
...................\...\.......\.......\des_old.h
...................\...\.......\.......\e_os2.h
...................\...\.......\.......\evp.h
...................\...\.......\.......\hmac.h
...................\...\.......\.......\md5.h
...................\...\.......\.......\obj_mac.h
...................\...\.......\.......\objects.h
...................\...\.......\.......\opensslconf.h
...................\...\.......\.......\opensslv.h
...................\...\.......\.......\ossl_typ.h
...................\...\.......\.......\rc4.h
...................\...\.......\.......\safestack.h
...................\...\.......\.......\sha.h
...................\...\.......\.......\stack.h
...................\...\.......\.......\symhacks.h
...................\...\.......\.......\ui.h
...................\...\.......\.......\ui_compat.h
...................\...\lib
...................\...\...\libeay32MT.lib
...................\...\ntdsparser.cpp
...................\...\ntdsparser.h
...................\...\samparser.cpp
...................\...\samparser.h
...................\...\utils.cpp
...................\...\utils.h