Picking up right where we left off so I'm going to clean this up just a little bit.
We know the administrator here.
They're the same hash we can identify that here.
So I'm going to actually just delete all of these accounts and we're not going to worry about this w
d a utility here WD.
We're not gonna worry about default account or guest account.
Google Hendley all those.
I'm just interested in the user accounts and the administrator accounts so let's copy this and I'm going
to move this to my hash cap folder and I'm going to just put it in a new text document.
I'm actually going to reuse the one that we used before which was that that hashes for text.
So we'll use that and then we're gonna go ahead and try to crack it.
So bringing this over you can see that these hashes here these hashes are what it called and tell them
previously we've cracked and tell them the two hashes now and tell them are the local hashes when you
dump a Sam.
That's what type of hash it is.
Now these are stored under module 1000.
Again you could do hash cat dash dash help and then grep and tell them and find that but we're going
to try to crack these if we can't crack these.
Then we'll try to pass them around.
Special note one thing to remember you can pass around and tell I'm hashes you can not pass around NTA
and be two hashes.
Big difference.
And tell them hashes can be passed A.L. and B2 cannot.
So remember that from the next video but from here what I'm going to do is I'm just going to do the
same thing as before.
Hash cat 64 that you see and I'm going to give this a module of a thousand because that's and tell him
and then I'm going to just provide this hash is like spell it hashes for text and then rock you that
text will just use a simple wordless dash capital O for optimization here and it's gonna try to crack
these passwords it should go through it pretty quick and I think at least one of them will fall oh we
made the we made the app and password password too I actually had forgotten and then the Peter Parker
or one of them.
3 1 0 3 1 D came back as as a admin that is blank so it's possible that our admin actually is disabled
when we see a blank account like this that means that the password is likely disabled so we might not
be able to actually pass this around because that account has been disabled We could try to pass around
password 1 and password 2 but we've now cracked both of these 2 and these are weak accounts so now we
also have a good idea of what kind of passwords they're using in their environment and we get to take
note of this and this is something that we can write in a report as a finding and just build off of
this.
It's always about passwords right.
It really comes down to passwords and weak passwords are gonna get your network taken down so quick
because there's so many different ways that we can capture hashes in a network that is just a matter
of time before you do and then start trying to crack them or pass them around.
So let's go ahead and meet up in the next video.
When we tried to pass around a hash and then we'll talk mitigations after that.