>> Hi everyone, welcome back to the course.
The last video we talked about the goal
of anti-forensics as well some information,
again at a very high level about
Windows file deletion and also the Recycle Bin path.
Again, you want to just memorize
those for the examination.
In this video we're going to talk
about password cracking.
We have several different forms of password cracking.
Brute force, dictionary, rule-based,
hybrid, and rainbow are the ones
we're going to talk about in this video.
Brute force, as the name implies,
we're going to try every possible combination.
We're brute forcing it,
like if we were kicking our door in or if
The Rock pictured here was kicking our door in.
It's going to take a lot longer,
if you've taken my ethical hacking course,
we talked about that in
there as one of
the attack types and that's why I recommend
you actually take either
the Certified Ethical Hacker examination before
taking this course or you
understand the material that's covered in that.
Again, here on Cybrary,
we have a free ethical hacking course.
I do recommend that you take it
before this particular course.
Just because we talk about things like this,
the password cracking in that course.
Next step, dictionary attacks.
Here, essentially just think of it like a dictionary.
The dictionary file is going to be
loaded in the password cracking application,
using operating system like
Kali Linux and then a tool inside
of that called John the Ripper.
That's a dictionary attack with John the Ripper.
Now this doesn't work against passphrases.
If you're using like a combination
>> of different things to
>> create a passphrase it's not
an effective attack against that.
Rule-based, here the attacker
has some information about the requirements,
they know that the password is going to
be maximum of seven characters in length,
for example, or it's
got to have two numbers in it or something like that.
Basically what they're going to do at that point,
is put a rule inside of a cracking application and use
that rule to reduce
the time it takes to crack the password.
Think of along the lines of like a brute force,
for example, using a tool like Cain and Abel.
In there we can adjust
the length of the characters in the password.
For example, we could say, we know the password,
we know it's seven characters of
length and we can see that reduces
our length to crack the password
>> by a significant amount.
>> Again, back in the ethical hacking course,
if you've taken it already,
we use that tool and we took it down from like
15 or 14 character length down to like six or seven.
We noticed that we went from like 2000 years down
to three or four weeks or just a matter of months.
Again, a rule-based is just used to
reduce the amount of time it takes to crack a password.
Hybrid, this is that combination
between dictionary and brute force.
It's going to use all sorts of combinations,
for example, like password 1,
password 1234 et cetera.
Again, just using
the most common types of things that people use.
Rainbow attack, this one is a precomputed table,
where essentially a bunch of different password hashes.
Let's just say I'm an attacker and I go and I
calculate out password 1234,
password 12345, a capital, lowercase et cetera.
We can use these rainbow tables
to potentially crack a password faster.
Some tools we can use to create or generate
these rtgen and Winrtgen are some common ones.
But the easy solution again,
this is salting your passwords.
If I'm creating a password hash of password 1234,
then you salt your password.
I'm not going to be able to crack that,
unless I've already figured out
how some different common salting calculations,
but that's really not realistic.
Honestly, you're not going to know
every possible salt that could be out there.
Now there are some ways around
different things but salting,
you're not going to know the different ways to
bypass that as far as like generating hashes.
Another thing we're going to talk about is
just BIOS password reset.
You may see this tested on
the exam as far as like what are some ways that we
can bypass BIOS here? Several different ones.
Manufacturer might have a backdoor for us.
We could also potentially reset the CMOS password.
DaveGrohl's technique available in
macOS and then also we can
reset the CMOS or remove the CMOS battery.
Again, that's stuff in
relation to the motherboard or the hardware itself.
Nothing is far as in depth that would ever
be tested on the exam as far as I'm concerned,
at least I don't think you would have to know it.
But just to understand like to reset CMOS,
you're going to potentially want to have to do
that at the motherboard itself.
Resetting the administrator password,
just some different tools
listed there that you'll want to know for
the exam that you can
use to reset the admin password on Windows.
PDF password recovery again,
just some tools listed here that you'll
just want to know for your examination.
Steganography and steganalysis,
you don't need to know this in depth.
Just understand that steganography is hiding a message,
for example, I'm an attacker,
I hide a message inside of a photo,
you don't see it,
the photo looks the same,
but there's a message inside of there.
Then steganalysis is just a flip side of that.
We're just discovering the information
now, this photo here,
we actually can see some faces in there,
this would not be a good example of steganography,
but I just wanted you to understand that
an attacker can hide stuff inside of something else,
whether it's a photo which is the most common one,
or something like an MP3 file as well.
Encrypting file system.
This is basically just file system level encryption,
for example, the
user account password needs to be strong,
otherwise you can bypass this
pretty easily like for example,
if your password's Password1234.
Different anti-forensic countermeasures again,
we talked about anti-forensics and the goals with it.
Keep tools updated, goes without saying.
Different keylogger, for example,
we could put a keylogger on
the attacker's machine and
potentially get information that way.
Now we can also prevent data from becoming overwritten.
Using things like encryption
or just make it a more
difficult to overwrite all the data.
Just a quick post assessment question,
true or false, is steganography a
process of hiding information in a file?
That one is true. Again,
steganography is the process
of hiding information in a file.
In this video, we just talked
about different password cracking
mechanisms that we can use.
We also talked about some
generalized high level information about how you
can bypass the BIOS password,
and then also some tools that we can
use for things like bypassing
the admin password on Windows and
also bypassing the password in PDF files.
In the next video, we're going to go over our lab,
where we're going to talk about
Hex Workshop and we're going to use
that to try to find out
what formatting the disk
is using, that we're taking a look at