Before I go,
I want to leave you some addition information so you can
be more successful in your attacks.
First, as we've seen in the demos,
we need to crack the hash passwords to get plain text credentials. For that,
there are a few password cracking tools that you can use.
We already talked about John the Ripper,
which is really easy to use, and it comes with Kali Linux.
You can find more information about John the Ripper on its GitHub.
You can type this link manually,
or you can go to the exercise files for this course, open the PDF
for this slide, and click on the link there.
The second cracking tool is the hashcat,
which is also a great tool for password cracking. The hashcat
requires some effort in the initial configuration,
especially if you want to use your GPU.
However, once it's configured, you're good to go.
It is really easy and fast to crack passwords. As important as having this
good cracking tool is having a password list so we can do our dictionary
attacks. In our demo, we used a RockYou password list,
but if you want to get other really good lists, go to the
SecLists GitHub. In there, there are millions of passwords
gathered from data breaches across the globe.
It is a really good source of passwords.
Also, if you want to learn more about the Responder,
you can check its official documentation. In there, you see that
you can use Responder for some other attacks.
And if you're wondering how to protect your company from this attack,
the easiest way is by disabling both LLMNR and NBT‑NS protocols in
your environment. This process is not that simple because some
legacy system may still be using it, but it's totally doable.
In this link, you can find how to disable both protocols in a safe way.
So that's it. That's the end of the course. In my opinion,
this would be your main attack on internal network.
Once you practice it, you see how easy it is to get credentials.
So, I hope you enjoyed this course, and I hope to see you soon.