In this chapter, we will cover the following topics:
Password cracking has its own uses, often times you may be able to access and recover password databases but they are encrypted and on other times to escalate privilege or gain access, you may have to use a password attack.
In this recipe, we will crack the local Windows machine passwords with direct access to the computer.
In this recipe, we will also simulate booting off a CD-ROM in order to reset the local password.
Let's ensure the following prerequisites:
We will now reset the Windows password using Kali boot media:
In this recipe, we will crack a remote Windows machine password. In this case, we will assume we have already launched the attack through Armitage and have taken the hashes we need. Please refer to Chapter 4, Finding Exploits in the Target and the Advanced attacks with Armitage recipe if needed.
Let's ensure the following prerequisites:
We will...
In this recipe, we will try to crack the active directory database from a Windows domain controller. We will assume you have already recovered the needed files, the system file, and NTDS.dit files from the computer through other exploitation means.
Let's ensure the following prerequisites:
We will now recover passwords from a windows domain...
In this recipe, we will crack Linux passwords using John the Ripper.
In this recipe, we will also simulate booting off a CD-ROM in order to crack the passwords using John the Ripper.
Let's ensure the following prerequisites:
We will now crack Linux password with John the Ripper:
In this recipe, we will crack hashes using John the Ripper and the password lists. We will also work with a local shadow file from a Linux machine and we will try to recover passwords based off wordlists.
Let's ensure the following prerequisites:
We will now attempt to crack passwords using a pre-defined wordlist:
In this recipe, we will crack hashes using John the Ripper in brute force mode. We will work with a local shadow file from a Linux machine and we will try to recover passwords by brute forcing them.
Let's ensure the following prerequisites:
We will use a brute force method of attack...
In this recipe, we will try and crack FTP passwords.
Cracking FTP passwords is a great way to both access the system through FTP and get the username and passwords against other systems and services. For this recipe, we will use hydra to test the system.
Let's ensure the following prerequisites:
Let's attempt to crack an FTP server passwords:
In this recipe, we will try and crack Telnet and SSH passwords.
Cracking Telnet and SSH passwords can be used against systems as well as infrastructures. With this, you have the ability to try and penetrate into switches, firewalls, routers, pretty much any network equipment and most often Linux machines will have this method of access enabled.
Let's ensure the following prerequisites:
In this recipe, we will try and crack RDP and VNC passwords on our Windows machine.
Cracking into either RDP or VNC can be a very powerful method to access any system. While RDP is restricted to Windows systems VNC is a cross platform remote control utility covering Windows, Mac, and Linux. You can use your previous scanning to look for open VNC ports even on Windows machines.
Let's ensure the following prerequisites:
In this recipe, we will try and crack a ZIP file password.
Sometimes, you will come across ZIP files that have a password on them. Normally, you can easily crack these passwords with a simple dictionary attack.
Let's ensure the following prerequisites:
We will now crack a ZIP files password and recover it's contents:
cd
mkdir 6.10
cd 6.10
touch one two three...
© 2017 Packt Publishing Limited All Rights Reserved
