So now we've used a password to pass around the network.
We discovered that one forty two and one forty one have the same local advent of Frank Castle.
So we are able to get a shell on Bold Machines now we could try this exact with Meadows boy go in there.
Run hash dum.
See if we get lucky.
But again that's a little bit on the noisy side.
That is it you saw it get picked up by antivirus by Windows Defender but you're seeing that.
Yes exact still isn't.
I still can't turn off my antivirus quite yet so you can see that.
P.S. exactly on this exact Pi is not getting picked up.
So that's nice.
What we can do to dump hashes in this situation is we can run a tool called Secret Stum.
And guess what.
Secrets jumped up high.
Also part of the impact tool kit.
So we can do something along these lines.
We can say Marvel f castle and then password one that should look very familiar.
It's the same syntax as before.
And then just 1 9 2 1 6 8 57 and we'll start with Frank Castle's machine at forty one.
Try that.
See what happens.
Look at that.
That's beautiful.
OK.
We know we have access to 142 as well.
Let's go ahead and just do that and come in here and it's going to dump all this information for us.
So this is wonderful information.
OK.
It's coming in here and it's dumping not only the Sam hashes but it's dumping what are known as LSA
secrets and this DP API key.
You don't have to worry too much about bees right here.
More so we're going to focus on the hashes that we get back if we get any local hashes.
We'll talk more about what the LSA secrets are in the rest of this is and we get into Mimi Katz here
in just a few videos so I'll say that for this or I'll save that for later.
But just know that you can dump these hashes and look we can grab these.
We can also just kind of examine and see like I can copy this and we can just go into a new tab and
just say gee Edit I'll just call this test and we'll just paste this into here and then I'll grab these
other ones and I'll paste them and you could do a quick quick eye test and see here if I can copy if
the same hash shows up more than once.
So look here and just see and we can separate these out just to make a little easier if there's password
reuse the last hash here will be the same.
So you can see here that the administrator account is utilizing the same password.
So if we're going to try to pass this hash around guess what we are we can try to pass this around and
see if it'll get us around the network and we'll see what this does.
And then we'll try to crack some of these hashes and see if these hashes crack what it's going to look
like and go from there.
So in the next video we're going to focus on trying to crack these hashes and then I'll show you the
passing the hash method which is incredibly useful and why we don't even have to attempt to crack these
if we don't want to.
So let's go ahead and jump over in the next video or we just quickly try to crack these passwords and
then we'll move on into passing the hash.