Hands-On Penetration Testing with Kali NetHunter

Exercise – using acccheck

If you are in a position where you have retrieved user information from running enum4linux, you can now attempt a basic password crack. A tool that could be used at this point is known as acccheck and is ideally suited for cracking passwords associated with the SMB protocol. While we aren't going to do our more advanced password-cracking until later, we can at least attempt a basic one now.

In this example, I will target a user with the username user; I can do this by issuing the following command:

acccheck -v -t <IP address> -u user -P /usr/share/dirb/wordlists/common.txt 

In this command, the switches show us the following:

• -v for verbose
• -t for the target IP
• -u followed by the specified username
• -P for the text ...