Which tool dumps password hashes from NT SAM database?

Which tool dumps password hashes from NT SAM database?

• A. got-responded
• B. pwdump7
• C. Respounder
• D. SecurityFocus

Answer: (B)

Dumping password hashes from the NT SAM database is about extracting the stored Windows credentials so they can be analyzed offline. The tool designed for this exact task reads the SAM database (and often needs the SYSTEM hive to derive the boot key) and outputs the NTLM and LM hashes for user accounts. That targeted capability is what makes pwdump7 the best answer here, since it was specifically created to pull those hashes from the SAM. The other options don’t fit this purpose: SecurityFocus is a vulnerability site, not a hash-dumping tool, and the remaining two names don’t correspond to known tools for extracting SAM hashes.

Dumping password hashes from the NT SAM database is about extracting the stored Windows credentials so they can be analyzed offline. The tool designed for this exact task reads the SAM database (and often needs the SYSTEM hive to derive the boot key) and outputs the NTLM and LM hashes for user accounts. That targeted capability is what makes pwdump7 the best answer here, since it was specifically created to pull those hashes from the SAM. The other options don’t fit this purpose: SecurityFocus is a vulnerability site, not a hash-dumping tool, and the remaining two names don’t correspond to known tools for extracting SAM hashes.