Juicy topic indeed is how to gain access to systems.
Well if you have the password and how you can get the password you can do that online attacks and non-technical
attacks offline.
Attack is usually when the target in question has been compromised and you have now the fire that has
the hashes of the password.
Take the fight to your own system and at your own convenience you will apply techniques such as the
Trinity brute force hybrid through base or rainbow table attacks to crack the password.
Meanwhile online password attacks usually happen when you don't have access directly to the system and
you trying to gain access remotely.
This is usually happen when you are presented for example but in what form and other types of authentication
forms the attacker would employ as well dictionary attacks brute force attacks and other types of attacks
such as men and the mentally replaying while sniffing.
The main difference between both of the attacks is that the prerequisites for the offline attack is
you acquiring the hash for the password.
Meanwhile the online password attack is kind of noisy and it will alert the administrator that certain
kind of attack is happening and you might be as well blocked your IP might be blocked.
Some password policies might apply for the lock out period and only an attack is actually this more
difficult to to execute than offline attacks.
The non-technical attacks are usually straightforward as we saw earlier with the phishing technique
of social engineering.
Shoulder surfing as well might happen in public places and dumpster diving is when you dig into the
trash of the victim to get more information about possible passwords.
So a dictionary attack and a brute force attack is common between offline and online and it's usually
the easiest way to go for guessing a password.
A dictionary attack is when the attacker uses a file that has possible words from the opportunity and
tries to guess into the password manually or visually using a system an application a brute force attack
happens when the attacker uses some character sets like all the uppercase characters or the lowercase
characters or the symbols on and all the numbers and the combination for the using of a password takes
place.
Usually this is like a long process hybrid attack as a combination between dictionary attack and a brute
force attack.
Meanwhile rule based attack usually happen when you have information about the nature of the password.
So if you have the password policy of the victim or the company or organization you are ethically attacking.
You will see this in the application and statistically speaking this will enhance the time needed to
crack a password a rainbow table is a list of pre computed hashes and where corresponding PASSWORD IS
THERE NEXT TO THE HASH which is cracked and to do that.
Just compare the hash that you have with the hash found in the rainbow tables and if there is a match.
Here you go you crack the password for the only password attacks.
Same techniques apply in terms of the chimney attack and before that and many times it is easier to
reset a password.
Then to guess it.
So if you have access to the system you might good from a Linux CV and some applications will locate
usernames and you go you can just reset the password instead of taking a lot of time guessing it other
types of a technique happened when you don't want to interact with the victim but you're there on the
network sniffing capturing hashes and reusing them to authenticate.