In this lesson, we will see how we can extract the exact password.
OK, off Windows User, right.
In the previous videos, we have seen how we can reset the password for users, either for standard
user or for an administrator user.
But now we are not going to reset the password.
Instead, we are going to extract the exact password.
OK, we will extract the original password.
OK, so let's see how to do this for this.
We are going to use three different tools.
First one is B.W. seven.
OK, so we are actually going to dumping and breaking the password hashes.
Right.
So there is a database, same database in your system, OK?
It stands for security access.
So any security account manager.
Right.
So same database is present in your Windows operating system, which contains your user account details
and password descriptors like security descriptors.
So it will contain your password in hashes either on elections or on implementations.
OK, then we will use a tool called VIN RPG that is Bendl Rainbow Table Generator.
Right.
So it will going to generate a table based on our specifications and it will create a password list.
Right.
Then we will use rainbow crack bool, OK, in order to extract the original password in plain text format
from the hashes that we have done.
Right.
So let's see how to do this.
First of all, let's open command prompt and run as administrator.
Yes.
Now let's go to the drive and let's go to the router seven, OK, to download them seven.
Simply go to Google and type download B.W. them seven, OK.
And if you don't find it over the Internet, then ask me.
I will share a link with you.
Now let's run the executable file.
OK, see, this is the attorney.
So when you go to the Internet to download problems seven, just verify whether you are visiting the
the ordinary website or not.
Right now it says, yes, here is the password.
OK, for one of the user on my main machine.
Right.
So let's save these passwords in a file called Hashes Dot Text.
Right.
And let's assign location, which is C, colon backslash, B, W W seven backslash.
And then.
Hashes don't text her data.
Done.
Now let's go to our window.
INAUDIBLE generator.
So so you drive and then we are Daejeon.
Here it is.
OK, so let's run this application and now let's create a password table, go to a table, select the
hash form.
So let's it.
And then select the minimum length.
OK, to.
Maximum length, let's say, for now, it's asking for the total count of total gene count, so let's
say forty thousand or foreleg is sufficient.
OK, see, the more the gene goes, the more are the possibilities that we are going to get the exact
password in Benedicte it right now here you can select correctly, said a sword, says Eloqua, which
means all four words in the letters.
OK, or you can go for a lower alphabet.
That means all alphabetized in lowercase.
But we will go with the numeric.
OK, as it is a demonstration, then I know my password, so I will go with numeric one.
OK, just click on OK.
Right and then again click on Koki.
OK, so Seabass it has started this process but it will going to take some time.
So let me pause this video then let.
Finally, we have a generator doing what they want.
OK, now I have used a tool called Window Rain Portable Generator, but you can also use CommonGround,
OK, to generate a removable.
OK, so let's see how to do it.
See, our pigeon is Decameron for this.
OK, so Orexigen then define your hash pipe, whether it is L.M. or NPRM or modify etc..
OK, then define what kind of range.
Whatever you want to generate like numeric alphanumeric etc..
OK then this is the minimum number of length, OK.
And this defines the maximum number of length of the password.
Right.
Then keep it zero.
And this is the number of passwords you want to generate in total.
OK, so let's say you want to generate the total number of passwords to ninety thousand.
OK, so let's change it to ninety thousand.
OK, and then define numbers like zero, one, two, three, four, five, six, seven, eight, nine,
10.
OK, and then leave the last option to zero.
This way you will able to generate a table with 90000 passwords, which are the combination of these
numbers right now.
After generating a table, it is important to sort that table.
So to the table we will use the combined RFP sort of rainbow table sort and then the name of the file.
OK, let's close this.
Now, let's open green correctly, so here it is.
Let's run the application.
So this is a rainbow pool which help us to extract a password from hashes in public text.
OK, so let's see how to do this.
First of all, let's say a hash, OK?
And now let's open our hash file, which is in the bottom seven.
So this is B.W. seven.
Let's open hashes file right now.
Let's copy this one.
OK, let's copy this hash.
Because the rest of the users, like Richard Guest, has no password, right, but then the user has
a password.
That's why I picked up this hash.
OK, now based here, click OK, now go during whatever search for rainbow tables.
So let's say I want to open them this way, OK, because it's a short file, right.
If we go for this long file, which I have generated some time ago, then it will going to take around
15 to 20 minutes or more just to scan this file.
Right.
But my aim is to show you a demo of how actually the rainbow crack tool works.
Right.
So let's open this file.
See, it has detected our password and password is one, two, three.
Right now, I have not changed passwords for this demonstration purpose, but I am actually using this
simple password from last six months.
OK, now let's verify whether this password it works or not.
So let's log.
OK, and type one, two, three.
OK, see.
One, two, three.
OK, so this way you can extract the exact password or the original password in plain text from hashes.
So B.W. them handbill two for dumping hashes and then window ought to be able to help you to generate
whatever and then brainwork that helps you to extract plaintext passwords from the generated table.
Right.
So I hope now you know how to use B.W. seven venality, gin and rainbow crit.