WEBVTT

00:00:00.940 --> 00:00:03.160
[Autogenerated] it's time for the fourth demo.

00:00:03.540 --> 00:00:08.550
Let me show you how you can use Hash Kat to crack a password protected.

00:00:08.560 --> 00:00:09.750
PdF file.

00:00:12.540 --> 00:00:14.670
Here is my password protected.

00:00:14.680 --> 00:00:15.750
Pdf file.

00:00:16.740 --> 00:00:19.080
As you can see the document,

00:00:19.090 --> 00:00:25.950
crack me dot D f is locked and requires a password before it can be opened.

00:00:26.840 --> 00:00:30.560
Let's crack this password and read this document.

00:00:31.540 --> 00:00:36.500
The first thing that we have to do is learn the version off

00:00:36.500 --> 00:00:42.120
the PDF document because Hash Cat uses different hash modes

00:00:42.200 --> 00:00:44.450
for different PdF versions.

00:00:45.440 --> 00:00:50.420
Probably the easiest way off learning the PD aversion is to

00:00:50.420 --> 00:00:54.790
launch the file program in the console.

00:00:54.800 --> 00:00:56.760
I will type file.

00:00:57.340 --> 00:00:57.970
Next.

00:00:58.340 --> 00:01:02.410
I will type the name off my pdf document.

00:01:02.640 --> 00:01:03.590
Crack me DOM.

00:01:03.600 --> 00:01:06.670
PdF and I will hit Enter.

00:01:07.740 --> 00:01:13.320
As you can see, the version off the PdF file is 1.6.

00:01:14.240 --> 00:01:15.560
So far, so good.

00:01:16.440 --> 00:01:20.660
Next, I will type hash cat dash dash help,

00:01:21.140 --> 00:01:25.770
and I will check the hash mode for this pdf version.

00:01:28.740 --> 00:01:39.360
As you can see, the hash mode for PdF versions from 1.4 to 1.6 is 10,500.

00:01:40.440 --> 00:01:43.660
Okay, In the next step,

00:01:44.140 --> 00:01:47.910
I will extract the hash off the password from this

00:01:47.910 --> 00:01:52.350
password protected Pdf file for this purpose.

00:01:52.550 --> 00:01:54.280
I will use the program.

00:01:54.290 --> 00:01:58.490
Pdf to John DOM pl in module free.

00:01:58.490 --> 00:02:02.040
Off this course named Resource is you can find more

00:02:02.040 --> 00:02:06.840
information about this program in the console.

00:02:06.980 --> 00:02:14.160
I will type pdf to John DOM pl Next, I will type crack me.

00:02:14.210 --> 00:02:21.170
PdF, which is the name off my pdf document, and I will heat enter.

00:02:22.540 --> 00:02:27.550
As you can see the hash off the password has been extracted.

00:02:28.440 --> 00:02:32.810
Let me copy the hash of the password and let me use

00:02:32.810 --> 00:02:35.170
hash cut to crack this password.

00:02:36.840 --> 00:02:38.670
I will type hash cat.

00:02:39.940 --> 00:02:40.880
Next.

00:02:40.910 --> 00:02:45.560
I will type dash M 10,500.

00:02:46.040 --> 00:02:50.150
This is a hash mode for pdf version 1.6.

00:02:51.640 --> 00:02:55.380
After that, I will type dash A zero,

00:02:55.390 --> 00:02:59.470
which is used for a straight or standard attack.

00:02:59.900 --> 00:03:03.050
This is what I explained to you in the previous demos.

00:03:04.440 --> 00:03:07.650
Next, in between the apostrophes,

00:03:08.010 --> 00:03:11.860
I will paste the hash off the password that was

00:03:11.870 --> 00:03:14.760
extracted from this pdf document.

00:03:16.540 --> 00:03:23.060
I will provide a dictionary with passwords dictionary dot txt.

00:03:23.840 --> 00:03:26.570
And finally I will heat enter.

00:03:30.540 --> 00:03:37.560
As you can see, Hash cat cracked the password and the password is I love you.

00:03:39.140 --> 00:03:46.850
Next, I will go to my password protected pdf file and I will enter this password.

00:03:49.240 --> 00:03:51.240
As you can see, indeed.

00:03:51.250 --> 00:03:53.860
Hash Cat found the correct password.

00:03:53.870 --> 00:03:56.860
And now I can read this document.

00:03:57.740 --> 00:04:01.080
This is how you can use hash cat to crack it.

00:04:01.080 --> 00:04:02.380
Password protected.

00:04:02.380 --> 00:04:03.470
Pdf file.

00:04:04.140 --> 00:04:07.010
Last but not least in this demo,

00:04:07.020 --> 00:04:10.550
I presented a classical dictionary attack for

00:04:10.550 --> 00:04:13.760
cracking a password protected pdf file.

00:04:14.440 --> 00:04:19.380
But you can also use the attacks that I presented in the previous demos.

00:04:19.550 --> 00:04:24.370
A dictionary attack with a rule or a dictionary attack with a mask.

00:04:24.740 --> 00:04:27.860
And this is what I would like you to keep in mind.