And also to also dump's the hashas of the user so you can use this hash to impersonate another user
so you can download this Mimecast from the source for dot net and you can just maybe get drunk and you
get this link.
So if you go back and take this Mimecast download and the rest of dot com and go scroll down here and
download this track.
And now I have ordered on this one sorry.
Um, this one if you will.
You can see the wrist a little bit.
But first go on because you told the question, because my understanding is you forward and I click
on this and administrator so sometimes you don't need to run as administrator.
So there is one sitting in the group policy of this machine that is devoting a lot of binaries to something
like this.
I just forgot that.
So if there is a set default by all, then anyone can start debugging, uh, using the normal procedures.
So this means that if you can run if you have the group sitting on, so make sure that you have the
secured group policy settings.
So first thing we need to do is we need to, uh, we will attach our when we get to the process and
it will do the processing action.
It will try to but dump the ah, the memory from the processor and it will look for the possible hashes
in first place people.
So we need to the and it is OK.
And now we are going to log on uh this password using the security system and passwords, it will have
all the passwords of the users that are currently logged.
As you can see.
To go around the country, there is an accuser Keyzer anniversary order.
So this is my computer's password and it's just like our friend password, and I don't use it for any
other online accounts.
And there you can see those user don't log on server and this one.
So the user name is key and the domain is the desktop and hashes.
So you can dump these plaintext passwords and you can also dump this NPRM just so you can use these
hashes to do this, pass the hash out.
So some applications in Windows are some in this directory, access to the user name and the hash and
they will allow the access only to take the password.
So instead of the password, you can pass this hash to get other indicators.
So that's so serious vulnerability and you can use this in using this comment.
So Securus, copy this one and pasted in here.
So we need to change some things, that is we need to pay our administrators.
We do not.
The administrators are right.
We got accuser.
I'm sorry we covered the session.
Let's try to impersonate as this user.
And let's scroll down and down sort of this area and just push this one.
And then you need to, uh, do the domain name.
So this is a domain name, I actually don't have any domain, but it's destroying the computer domain.
So even though it won't work, but it will work it out when I have that to the set up.
So let's break this down in here.
And the user name Nikki.
So I discovered the CDC to try to connect to this user, to this debate with the interim, and it was
no comment from the system.
So it will Troy Aikman and with this other negative result that's straight ahead on this.
And seems like we do not get the process.
So maybe we should allow this domain like set up.
Let's try for our group.
So it's not working.
All right, but anyway, if you have the actual territory and your computer is joining to the domain,
you're going to be set at the end of this A.M. Hash and you will get the brunt of this escalated user
in general.
Use the administrator and of course, you will get the converters of this adventure tourism.
And you can also export some certificates with this crypto module.
And you can also use this as a dump.
And this we have seen and try to sell them so we can use these modules and those options.
So that's basically what this would be, because she's very powerful tool.
We can work and we can just dump the plaintext passwords and also hundreds of other users.
So we will see this more in the actual tree.
And I start to do this to three separate calls.
OK, but anyway, this is just basically what this movie gets.
I would add to that to the letter after release of this course.
All right.
Just one or two once.
So that's all for this year.
I hope you have understood the print sponsors and and I just using this at.