Kali Linux Intrusion and Exploitation Cookbook

Sensitive-information gathering

Often there are scenarios where network admins have to write scripts to automate the process on thousands of computers in a corporate network. Being on each and every system to configure them individually is a tedious and time consuming task. There could be situations where, because of negligence, sensitive files just keep lying around in the systems. Such files may contain passwords. Once we retrieve hashes of a compromised system we can use them to perform PTH (Pass the Hash) attack and gain access to different accounts found on the system. Similary, if users have same passwords being used over multiple systems the same hash can be used on another machine to gain that users access using the PTH attack. There are ...