‫So we imported hashes from a text file, and now's the time to crack the passwords.
‫After selecting the hash file, we can click next to jump to the next step.
‫And Cain gets the rose from the file and creates this table.
‫As you see, there are the users and there are the users passwords, Elm and TLM hashes.
‫Select one of them, I'll choose Administrator.
‫Right click on the line under dictionary tech, select and DOMA hashes.
‫So we are in the dictionary tech windows now.
‫Dictionary list is empty at the moment, so we have to choose at least one dictionary to perform an
‫attack.
‫Right click on the dictionary table and select Add to list.
‫Now we need a dictionary, almost every tool has dictionaries by default, so I want to look at the
‫Kane folder to see if there is any program files x86 because Kane is a 32 bit application.
‫Kane.
‫Word list here, there's a word list, text file.
‫So let's look at its contents.
‫And just a little tip here.
‫I generally use Notepad Plus Plus in Windows systems, which is much more powerful than the original
‫notepad.
‫If you try to open this file with Windows Notepad app, it may take a few minutes to open the file because
‫it's a really big one.
‫So right click and select Edit with Notepad Plus Plus.
‫This is the word list.
‫If you look at the bottom of the notepad, you'll see that the file is almost three and a half million
‫lines.
‫OK, so I want to look at the word one two three four QQQ uppercase Q, which is the password of the
‫administrator user.
‫The word list does not contain this word.
‫If we started the attack with this dictionary, we're just going to fail.
‫So I want to show you a successful attack.
‫So therefore I'll just add the word here.
‫So let me go down a bit because I want to show the speed of the trees as well.
‫Somewhere here.
‫So I'll have the word.
‫Save the file and close.
‫Now in Kane.
‫I'll add the word list that text file as a dictionary.
‫Now here there are some options.
‫Most of the password cracking tools, including Cane, have these kinds of options.
‫Password cracking tools do not just use words as they are.
‫They are also able to use the words in various forms.
‫Reverse double lowercase, uppercase, adding number behind the words, etc..
‫So we had the dictionary select the options and we're ready to launch the attack by clicking the Start
‫button.
‫And now the cracking starts.
‫As you can see in the key rate field, Cain tries more than two million passwords a second.
‫Now there are three and a half million passwords to try.
‫But don't forget the option selected.
‫Every word is tried, as is reverse, double numbers added, etc..
‫So there are tens of tries for a single line of the word list.
‫And here it is, Cain found the password from the hash in second.
‫Well done, Cain.
‫So in the table, the cracked password values are set by Cain.
‫And do you see the password?
‫It's all uppercase.
‫So let's try another user.
‫I really don't know the password of this user.
‫So right click Dictionary Attack and TLM hashes.
‫Same dictionary and start.
‫It makes more than two million trees per second this time.
‫And the attacks finished.
‫But we failed this time.
‫We couldn't find a password with this small of a dictionary.