WEBVTT

00:00:00.940 --> 00:00:02.890
[Autogenerated] Hi, My name is David.

00:00:02.900 --> 00:00:04.500
Welcome to my course.

00:00:04.510 --> 00:00:05.310
Credential.

00:00:05.310 --> 00:00:06.850
Access with hash cut.

00:00:08.039 --> 00:00:12.450
Hash Cat is the number one offline password _______ used by

00:00:12.450 --> 00:00:15.150
README members and ___________ testers.

00:00:15.640 --> 00:00:20.770
It supports different password cracking techniques and many hash algorithms.

00:00:21.240 --> 00:00:24.310
What's more, it supports CPUs,

00:00:24.320 --> 00:00:30.760
GPS and other hardware accelerators on Linux windows and macOS.

00:00:32.040 --> 00:00:35.730
Hash cut is available at hashtag .NET,

00:00:35.750 --> 00:00:39.290
and in this course I will demonstrate how you can use

00:00:39.290 --> 00:00:41.410
hash Cat to launch a dictionary,

00:00:41.410 --> 00:00:47.070
attack a dictionary attack with a rule and a dictionary attack with a mask.

00:00:47.940 --> 00:00:51.210
And I will also demonstrate how you can use hash

00:00:51.210 --> 00:00:53.610
cut to crack password protected.

00:00:53.620 --> 00:00:58.990
PDF and the Doctor X Files in the kill chain.

00:00:59.000 --> 00:01:03.690
Hash cut can be placed either between exploitation and privilege

00:01:03.690 --> 00:01:08.550
escalation or between exploitation and lateral movement.

00:01:09.340 --> 00:01:10.960
The question is as follows.

00:01:11.340 --> 00:01:17.440
What will the attacker do after successful exploitation and cracking users?

00:01:17.440 --> 00:01:19.260
Passwords in hash cut.

00:01:20.540 --> 00:01:23.520
If the attacker cracks the passwords off high

00:01:23.520 --> 00:01:26.360
privilege users on the same machine,

00:01:26.840 --> 00:01:30.170
then the next step will be privileged escalation.

00:01:31.440 --> 00:01:35.850
If the attacker cracks the passwords of users on other machines,

00:01:36.440 --> 00:01:39.560
then the next step will be lateral movement.

00:01:41.340 --> 00:01:45.270
In the context off Mitter Attack framework Hash Cat is

00:01:45.270 --> 00:01:48.150
related to the credential access tactic,

00:01:48.840 --> 00:01:55.710
and the corresponding technique is 11 10 brute force password,

00:01:55.710 --> 00:01:58.330
brute forcing or password cracking.

00:01:58.610 --> 00:02:01.460
This is exactly what hash cut is used for.

00:02:02.040 --> 00:02:06.570
What's more, hash cut supports different password cracking techniques.

00:02:07.040 --> 00:02:11.450
That's why you can use hash cut to cracked passwords in a smart way.

00:02:11.840 --> 00:02:16.550
And in the upcoming demos, I will show you how you can do it step by step.

00:02:18.140 --> 00:02:20.330
But before I jump to the demos,

00:02:20.420 --> 00:02:23.550
I will discuss an attack scenario so that you can

00:02:23.550 --> 00:02:26.450
better understand when hash cut is used.

00:02:27.040 --> 00:02:28.060
Here is the story.

00:02:28.940 --> 00:02:32.140
First, the attacker launches his exploit,

00:02:32.210 --> 00:02:36.240
gains access to the machine and dumps hashes off

00:02:36.240 --> 00:02:38.870
users passwords from the database.

00:02:39.540 --> 00:02:44.550
Next hash cut is used by the attacker to crack these passwords.

00:02:45.340 --> 00:02:50.560
If this passwords belonged to high privilege users on the same machine,

00:02:51.040 --> 00:02:55.540
then the next step will be privileged escalation and gaining

00:02:55.540 --> 00:02:58.360
access to the accounts off these users.

00:02:59.840 --> 00:03:03.940
If this passwords belonged to users on other machines,

00:03:04.460 --> 00:03:09.150
then the next step will be lateral movement and gaining access to

00:03:09.150 --> 00:03:12.950
the machines off other people in the organization.

00:03:14.040 --> 00:03:21.170
Okay, now you understand what hash cut is why it is powerful and when it is used.

00:03:21.180 --> 00:03:26.770
So let me jump to the demos and let me show you how hash cut works in practice.