Kali Linux 2018: Assuring Security by Penetration Testing - Fourth Edition
by Shiva V. N. Parasram, Alex Samm, Damian Boodoo, Gerard Johansen, Lee Allen, Tedi Heriyanto, Shakeel Ali
Offline attack tools
The tools in this category are used for offline password attacks. Usually, these tools are used to do vertical privilege-escalation because you may need a privileged account to get the password files.
Why do you need other credentials when you already have a privilege credential? When doing penetration testing on a system, you may find that the privileged account may not have the configuration to run the application. If this is the case, you can't test it. However, after you log in as a regular user, you are able to run the application correctly. This is one of the reasons you need to get other credentials.
Another case is where, after you have exploited a SQL injection vulnerability, you are able to dump a database and ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access