WEBVTT

00:00:00.940 --> 00:00:03.160
[Autogenerated] it's time for the second demo.

00:00:03.540 --> 00:00:05.620
Let's continue our hash cut,

00:00:05.630 --> 00:00:09.640
password cracking journey and let me show you how you can

00:00:09.640 --> 00:00:12.450
launch a dictionary attack with a rule.

00:00:15.040 --> 00:00:16.390
In the previous demo,

00:00:16.400 --> 00:00:20.170
I launched a classical dictionary attack using Hash

00:00:20.170 --> 00:00:23.260
Cat and I cracked four passwords.

00:00:23.940 --> 00:00:28.950
Now let me launch a dictionary attack with a rule and let me show you

00:00:28.960 --> 00:00:32.670
how you can crack more passwords with this attack.

00:00:33.540 --> 00:00:37.950
One of the most popular rules is the leet Speak role.

00:00:38.440 --> 00:00:42.160
Let me briefly explain to you how this rule works.

00:00:43.140 --> 00:00:48.960
This rural replaces one character in the password with another character,

00:00:49.340 --> 00:00:53.660
and it happens for every password from Password Dictionary.

00:00:54.640 --> 00:00:57.250
Once the character has been replaced,

00:00:57.640 --> 00:01:02.360
the hash of the password is calculated and compared with

00:01:02.360 --> 00:01:05.770
the hash is in the hashes dot txt file.

00:01:07.010 --> 00:01:12.300
The exemplary replacement is as follows for the password

00:01:12.300 --> 00:01:16.470
Michael A is replaced with at character.

00:01:17.040 --> 00:01:21.360
That's why the hash off the following string is calculated.

00:01:21.740 --> 00:01:22.080
M.

00:01:22.080 --> 00:01:25.550
I C H at character E l.

00:01:26.140 --> 00:01:31.450
And it is compared with the hash is in the file hashes dot txt.

00:01:32.940 --> 00:01:37.930
The other popular replacements are replacing Oh,

00:01:37.940 --> 00:01:45.450
with zero and replacing s with dollar sign Okay,

00:01:45.470 --> 00:01:49.120
Now it's time to show you how you can launch a dictionary

00:01:49.120 --> 00:01:52.370
attack with a little big role in Hash Cat.

00:01:53.640 --> 00:01:57.800
The only thing that you have to do is take the command

00:01:57.800 --> 00:02:01.760
from the previous demo AD DS Azure.

00:02:01.770 --> 00:02:11.330
Our rules slash elite speak dot rule at the very end off this command and hit.

00:02:11.340 --> 00:02:13.260
Enter, that's it.

00:02:14.040 --> 00:02:16.300
But before I hit enter,

00:02:16.470 --> 00:02:21.780
I want to remind you that a classical dictionary attack presented in

00:02:21.780 --> 00:02:26.370
the previous demo cracked four out off 10 passwords.

00:02:26.840 --> 00:02:31.360
Now I will launch a dictionary attack with the lips big role,

00:02:31.370 --> 00:02:34.440
which is a more advanced dictionary attack.

00:02:34.450 --> 00:02:39.860
And I will check if this attack results in cracking more passwords.

00:02:40.840 --> 00:02:41.490
Let me know.

00:02:41.490 --> 00:02:44.470
Hit, enter and check what's gonna happen.

00:02:47.540 --> 00:02:53.260
As you can see, hash cat cracked seven out off 10 passwords,

00:02:54.140 --> 00:02:58.820
please keep in mind that hash Scott remembers the state off password

00:02:58.820 --> 00:03:03.260
cracking from the very beginning till this moment.

00:03:04.240 --> 00:03:10.620
So if I cracked four passwords in the first demo using a classical

00:03:10.620 --> 00:03:14.620
dictionary attack And now in the second demo,

00:03:14.630 --> 00:03:20.880
I see seven cracked passwords after launching a dictionary attack with the lips.

00:03:20.880 --> 00:03:21.540
Big role.

00:03:21.930 --> 00:03:27.440
Then it means that the dictionary attack with the lips Be Groll cracked.

00:03:27.450 --> 00:03:32.750
Additionally, free passwords and you can see these passwords here.

00:03:33.940 --> 00:03:40.870
The first password is Michael, where a was replaced with that character.

00:03:41.610 --> 00:03:44.960
The second password is Spider.

00:03:45.440 --> 00:03:49.550
Where s was replaced with dollar sign.

00:03:50.440 --> 00:03:57.870
And the first password is lemon juice where oh was replaced with zero.

00:03:58.740 --> 00:04:04.400
So as you can see, a dictionary attack with a rule is really powerful.

00:04:04.610 --> 00:04:07.260
It can help you crack more passwords.

00:04:07.840 --> 00:04:08.810
And in this demo,

00:04:08.810 --> 00:04:13.750
you learned how you can launch this attack in practice using hash cat.