Applied Network Security

How do hackers obtain the hash?

As mentioned earlier, a hacker will usually target a low-level employee that has a device with line of sight (direct access) to a workstation server on the network. A hacker may then send a payload in the form of a RAT, such as the one we created in Chapter 4, Creating a RAT Using Msfvenom. A socially engineered e-mail is created posing as the HR department. Within the e-mail an urgent message is placed telling the employee a payroll error has been made. The message will then direct the user to click on the attached link to verify their identity for the payroll department. Most employees will click on the link in fear of their paycheck being disrupted if they don't.

Once the employee clicks on the link the ...