samdump2(1)

samdump21

Retrieves syskey and extract hashes from windows 2k/nt/xp/vista sam.

Usage

samdump2 [OPTIONS] SYSTEM_FILE SAM_FILE

Overview

samdump2 is designed to dump Windows 2k/NT/XP password hashes from a SAM file, using the syskey bootkey from the system hive.
-d

enable debugging

-h

display this help

-o file

write output to file

Examples

samdump2 -o out /mnt/ntfs/WINDOWS/system32/config/system /mnt/ntfs/WINDOWS/system32/config/sam

Releases

9 releases since Debian 5.0 (Lenny); the text changed 1 time.

  1. 5.0–7
  2. 8–13

-d since Debian 8 (Jessie); -h since Debian 8 (Jessie); -o since Debian 8 (Jessie).

Author

This manual page was written by Adam Cecile <[email protected]> for the Debian system (but may be used by others) and modified by Objectif Securite <[email protected]> Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 2 or any later version published by the Free Software Foundation On Debian systems, the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL-2.

From samdump2 3.0.0-8 in Debian 13 (Trixie). Parsed by carta from the page's man source.