7MS #591: Tales of Pentest Pwnage - Part 52

7MS #591: Tales of Pentest Pwnage - Part 52

Today we talk about an awesome path to internal network pentest pwnage using downgraded authentication from a domain controller, a tool called ntlmv1-multi, and a boatload of cloud-cracking power on the cheap from vast.ai. Here's my chicken scratch notes for how to take the downgraded authentication hash capture (using Responder.py -I eth0 --lm) and eventually tweeze out the NTLM hash of the domain controller (see https://7ms.us for full show notes).

Avsnitt(706)

Populärt inom Politik & nyheter

motiv
svenska-fall
aftonbladet-krim
p3-krim
politiken
rss-viva-fotboll
flashback-forever
fordomspodden
aftonbladet-daily
rss-sanning-konsekvens
spar
rss-vad-fan-hande
rss-krimreportrarna
blenda-2
rss-krimstad
olyckan-inifran
rss-frandfors-horna
dagens-eko
rss-flodet
krimmagasinet