Kali Linux 2018: Windows Penetration Testing - Second Edition

Cracking the NTLM code (revisited)

One method of password attacks was covered in Chapter 4, Sniffing and Spoofing. On a Windows network running NetBIOS, capturing NTLM hashes is child's play. They're just floating around in the ARP cloud waiting to be plucked. As we have shown in the earlier chapters, when you are using Metasploit, you don't need to even crack this hash to a password but can just pass the hash to another Windows system.

Sometimes, you need the actual password. System admins sometimes get lazy and use the same password on several classes of devices. Let's say you have some Windows hashes and you need to get into a router or a Linux machine to which you are not sure of the password. There is a good chance that the passwords ...