In this studio, we are going to talk about this, dumping the pastor ashes from the victim's computer
and I have this, uh, simple recipe using this net that I have already uploaded this Sherida to CNN
on this.
So I got this cell and we know how to dump hashas using this matters where we just type the hash dump
and you will get the hashes.
But we busy manually from the postcard if Judum so fusca you see the WC 332.
That this will dump the Windows credentials and there is also a 64 bit version of this WC, uh, so
you can execute either one of these, uh, you can just, uh, the other day for all this with permission,
you know that the, uh, you don't know the architecture.
You can just, uh, do this tattoo.
It will work fine.
So now let me, uh, copy this.
So now I have covered in my desktop.
So you can see if you go to this, uh, you associate with those resources and you get much more, uh,
binaries regarding Windows expert, you can see the binaries and this is the, uh, evasion tool.
And we catch this will also dump, uh, the hashes and the power Sprite and especially NWC.
So we have copied DWC that you do from this folder.
If you go and take a look at this binaries and you will see how much more binary is here and how you
press freedom and beating and see that whenever you have all this access, you can also send the net
Carbonetti and run the transfer files.
You can also you also have to navigate AT&T.
So it's, uh, what, uh, what taking a look at this with those resources folder.
So now we are going to copy this so that we going to have to dump the list.
Now we know if she dumped the sea and another one.
We are going to take a look at this, Peter.
So let me copy these two directress into my desktop.
So.
All right, now and this year, we're going to see, uh, uh, functionality of these three executables.
So we have this, uh, desktop shall know.
What we're going to do is we are going to do the trick to transfer our files into this, uh, Windows
XP machine.
So let's go ahead and do this.
Let's call.
So let me make sure that my service is running, that is of Deputy Sara.
All right, now, let's say a coal user.
And the password.
Now, let me change to the more.
And then we are going to use the debt command to get the.
Good name is, uh, WCT 32 that frustrate me, I'll get this one.
Sorry.
And then we will say by.
So now we are going to run the TV from the script, if people want that be.
All right, if I say yeah, and you can see there is W.S. 32.
All right, now let's go ahead and turn this W.S. meter U.S. by default, it will dump our password
hashas.
All right, maybe.
OK, I did not copy correctly, so let me just delete this one.
So for this demonstration, I am going to show you this.
OK, let me copy these three into my room and then I'll transfer to Windows XP, then it might be somewhat
comfort.
Here.
So I have of set the password for this Mookie's.
So now let me call VRD a jigaboos.
And then just pasted in here.
So open this current project.
So we want to risk.
So let me make this font bigger, so the SO will be clearly visible.
All right, now I am on the desktop, now I can see WCG 32 36.
Now, as you can see, we got the password hashes for the Nekesa and also for the work group.
So this is the first one is the alarm hash and this is the anti hash.
So windows up to expand to two and three.
They're using the alarm manager that is called then manager, uh, user to store this password hash
and then Windows seven on what they use at the NPRM, uh, and then manager to show this person.
I just know if I said W.S. that you see minus which you get some options and what you can do is you
can reach the sessions and credentials.
That is the default one.
We have to know.
And with this W option, you can try to dump the plaintext passwords that are stored in the memory.
So for this option, any one user should be logged on to the machine.
So as you can see, we got the user and the password is Nikkie.
So we have got the correct answer.
But we only got the pastor for that lockdown user, so you'll only get the password for the lockdown
user.
And in a similar way, the movie also works in the same way.
So now let's, uh, uh, take this off to a new field and you will see there are three phases over here.
Click on this one.
This is the, uh, accident.
That is a cache dome.
And the second one is speed of freedom.
So you can use the speed of freedom, uh, to crack these hashes with some other tools, react under
pressure, etc..
And this is that if you don't lock.
So let me, uh, review the contents of this one condition, that zero zero one and I'll you the freedom.
So as you can see, you've got the harshest of are the users, so you can see administrator, uh, this
is the group after group only they can see this is the hash of this administrator.
And here the district has no password and help.
And and so I have created these two users before and they are not passwords.
They're connected.
And Nikki, I had just created password before recording this video.
And this is the hash of this Nikias.
So this Peter will dump will also do the same.
So, OK, we need to specify the target so to specify our own target and you'll get the same output
so you can also dump the password, hash this out, that remote user with the username and password
if you specify.
So you need to specify the, uh, IP address and the user user password before the password and then
it will try to grab the password of that robot with permission.
So these are this is all about these three tools over you.
And with the P.W. Dump, you can extract the password.
I shut the computer out, the gender basic login.
Of course, these three are pushed exploration modules.
And if you look at the three types of dump to the dump and with this dump, you can just, uh, get
the hashes and the receipt that you do will get to the hashes.
And also it will get the clear text plaintext password for the users.
So at least one user should be locked for DWC to.
So these are the different tools you can use to dump the bodies, but apart from that matters.
But within a matter what you can just easily, uh, hash them, you can run the government has done
and you can stop using the profiles upper command.
So it's somewhat easier than the normal one.