Jan 03 2010
Retrieving Windows Password Hashes with WinScanX
Uses remote registry and the Cain & Able tool to crack passwords hashes on remote machines without needing to install anything.
With WinScanX (and the help of Cain & Able | http://www.oxid.it/) you can retrieve the password hashes, LSA secrets, and MS CACHE hashes from a remote machine without copying a single file to the remote host. This way the LSASS.exe process won’t be touched and anti-virus applications won’t have the chance to interfere.
via Windows Audit » Retrieving Password Hashes with WinScanX -y.