[Autogenerated] Hi, My name is David.
Welcome to my course.
Credential.
Access with hash cut.
Hash Cat is the number one offline password _______ used by
README members and ___________ testers.
It supports different password cracking techniques and many hash algorithms.
What's more, it supports CPUs,
GPS and other hardware accelerators on Linux windows and macOS.
Hash cut is available at hashtag .NET,
and in this course I will demonstrate how you can use
hash Cat to launch a dictionary,
attack a dictionary attack with a rule and a dictionary attack with a mask.
And I will also demonstrate how you can use hash
cut to crack password protected.
PDF and the Doctor X Files in the kill chain.
Hash cut can be placed either between exploitation and privilege
escalation or between exploitation and lateral movement.
The question is as follows.
What will the attacker do after successful exploitation and cracking users?
Passwords in hash cut.
If the attacker cracks the passwords off high
privilege users on the same machine,
then the next step will be privileged escalation.
If the attacker cracks the passwords of users on other machines,
then the next step will be lateral movement.
In the context off Mitter Attack framework Hash Cat is
related to the credential access tactic,
and the corresponding technique is 11 10 brute force password,
brute forcing or password cracking.
This is exactly what hash cut is used for.
What's more, hash cut supports different password cracking techniques.
That's why you can use hash cut to cracked passwords in a smart way.
And in the upcoming demos, I will show you how you can do it step by step.
But before I jump to the demos,
I will discuss an attack scenario so that you can
better understand when hash cut is used.
Here is the story.
First, the attacker launches his exploit,
gains access to the machine and dumps hashes off
users passwords from the database.
Next hash cut is used by the attacker to crack these passwords.
If this passwords belonged to high privilege users on the same machine,
then the next step will be privileged escalation and gaining
access to the accounts off these users.
If this passwords belonged to users on other machines,
then the next step will be lateral movement and gaining access to
the machines off other people in the organization.
Okay, now you understand what hash cut is why it is powerful and when it is used.
So let me jump to the demos and let me show you how hash cut works in practice.