Table of Contents

Copyright

Acknowledgments

About the Authors

Introduction

Chapter 1. Windows Operating System – Password Attacks

Windows Passwords Overview

Security Accounts Manager

System Key (SYSKEY)

LAN Manager Hash

NT Hash

LSA Secrets

Password and Lockout Policies

How Windows Password Attacks Work

Dangers with Windows Password Attacks

Scenario 1: Obtaining Password Hashes

Scenario 2: Pass the Hash

Scenario 3: Timed Attacks to Circumvent Lockouts

Scenario 4: LSA Secrets

Future of Windows Password Attacks

Defenses Against Windows Password Attacks

Defense-in-Depth Approach

Microsoft and Third-Party Software Patching

Logical Access Controls

Logging Security Events

Implementing Password and Lockout Policies

Disable LM Hash Storage for ...

Get Seven Deadliest Microsoft Attacks now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial