[Snort-sigs] pwdump, l0phtcrack, hash extraction
sometimes404 at ...12...
Tue Jul 20 06:06:08 EDT 2004
I may be missing something obvious - but I cant seem to find a snort sig for
pwdump/3 or and other hash extraction utility. I havent myself done a packet
analysis, so it may just be a lack of fingerprint. I have a secondary
comercial IDS which does have a signature for pwdump, which indicates some
matter of identification. If I am missing something out-of-the-box, forgive
me. Any thoughts?
Don�t just search. Find. Check out the new MSN Search!
More information about the Snort-sigs