Tag Archive: accounts

Windows Credentials Editor

Windows Credentials Editor (WCE) allows to list logon sessions and add, change, list and delete associated credentials (ex.: LM/NT hashes and Kerberos tickets).
This can be used, for example, to perform pass-the-hash on Windows, obtain NT/LM hashes from memory (from interactive logons, services, remote desktop connections, etc.) which can be used to perform further attacks, obtain Kerberos tickets and reuse them in other Windows or Unix systems.
Supports Windows XP, 2003, Vista, 7 and 2008.

Download it here


Account lockout tool

This post is mainly for reference purpose. Have you ever had an network account that kept getting locked out and didn’t know why? EventCombMT is a tool provided by Microsoft (included with Microsoft Account Lockout Management Tools) that will allow you to search for lockout events and will identify the computer in which is causing the account to be locked.

It doesn’t tell you why, but once you have the computer which is causing it you can investigate further.