win2k checklist v2111 - appendix d mse安全攻防资料

《win2k checklist v2111 - appendix d mse安全攻防资料》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、UNCLASSIFIEDWIN2KWIN2KWSecurityChecklist2.1.11FieldSecurityOperationsAppendixDDefenseInformationSystemsAgencyDPASSWORDSTRENGTHVERIFICATION-STANDARDOPERATINGPROCEDURESThisappendixcontainsproceduresforrunning“JohntheRipper”passwordintegritysoftware.Thisutilityshouldberunagai

2、nstaDomainControllerineachWIN2Kdomainbeingreviewed.Theuseofthisutilityshouldbebriefedatanyin-briefingandpermissionshouldbeobtainedtorunit.The“JohntheRipper”passwordcrackingutilityisscriptedusingabatchfilecommandscriptandrunslocallyonthesystembeingchecked.Thescript,pwchk.cm

3、d,andsupportingfilescanbeusedfromaCD-ROMorzipdisk.D-4UNCLASSIFIEDUNCLASSIFIEDWIN2KWIN2KWSecurityChecklist2.1.11FieldSecurityOperationsAppendixDDefenseInformationSystemsAgencyThescriptmustberunwithanaccounthavingadministratorrights.·Torunthescript,openthecommandprompt(Start

4、>Run>enter‘cmd.exe’>).·Changetothedrivecontainingthescript(e.g.CDE:)andenter‘pwchk’atthecommandprompt,thenpressenter.·ReplytothepromptthatasksifthisisaWIN2Kserver.·Thereviewerwillbepromptedtosavetheoutputtofloppy(Y/N),toinsertafloppyintotheAdrive,andthenpressanykeytoco

5、ntinue.Ifthereviewerselectsyesandinsertsafloppydisk,theoutputfilesarecopiedtoA.Ifthereviewerselectsno,theoutputissavedtoC:tempsrroutputandnooptiontoremovetheoutputisprovided.IfthereviewerselectedtosavetotheAdrive,theywillthenbepromptedtoremovetheoutputfromtheharddrive(Y

6、/N).Ifthereviewerselectsyes,theoutputissenttotherecyclebin.Ifthereviewerselectsno,thentheoutputismaintainedintheC:tempsrroutputdirectory.(Normally,thisdatawouldnotbeleftonthemachine)ThediskcontainingtheoutputfromthescriptshouldbeleftwiththesiteISSO.Theoutputconsistoffou

7、rfiles:1.Dumpfile.txt–containsthelocalSAMfile.Samplebelow:Admin_adm:500:889A4539E10382A0B79AE2610DD89D4C:9C04FA584DF117EF6810876AB32FC4AF:::NoGuest:501:31309487CCD5F39583C718A6B039ABEA:C3BAC902800BD42D36B72DD84A4EA61D:Built-inaccountforguestaccesstothecomputer/domain::user

8、id:1002:A697C60564044E121D71060D896B7A46:CC9B3C45AA25E01C7AC37BCAFA6CD7CF:::Administrator