Credential Access with Hashcat Dawid Czagan SECURITY INSTRUCTOR - PowerPoint PPT Presentation

Credential Access with Hashcat Dawid Czagan SECURITY INSTRUCTOR @dawidczagan

Creator: Jens Steube Hashcat is the no. 1 offline password cracker. It supports different password cracking techniques and many hash algorithms. What's more – it supports CPUs, GPUs, and other hardware accelerators on Linux, Windows, and macOS

Hashcat is available at https://hashcat.net/ I will demonstrate how you can use Hashcat to launch: - dictionary attack - dictionary attack with a rule - dictionary attack with a mask I will also demonstrate how you can use Hashcat to crack password protected PDF and DOCX files

Kill Chain Lateral Movement Exploit Action H Recon Escalate Evade

Kill Chain Lateral Movement Exploit Action H Recon Escalate Evade

Kill Chain Lateral Movement Exploit Action H Recon Escalate Evade

MITRE ATT&CK Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Tactics Discovery Lateral Movement Collection Command & Control Exfiltration Impact

MITRE ATT&CK Initial Access Execution Persistence T1110: Privilege Escalation Brute Force Defense Evasion Credential Access Tactics Discovery Lateral Movement Collection Command & Control Exfiltration Impact

HR ISP EXEC Globo-SW-01 Globo-R-01 Globo-SW-02 Finance Datacenter Engineering Globo-FW-01

HR ISP EXEC Globo-SW-01 Globo-R-01 Globo-SW-02 Finance Datacenter Engineering Globo-FW-01

HR ISP EXEC Globo-SW-01 Globo-R-01 Globo-SW-02 Finance Datacenter Engineering Globo-FW-01

HR ISP EXEC Globo-SW-01 Globo-R-01 Globo-SW-02 Finance Datacenter Engineering Globo-FW-01

HR ISP EXEC Globo-SW-01 Globo-R-01 Globo-SW-02 Finance Datacenter Engineering Globo-FW-01

t h s Demo Dictionary attack

t h s Demo Dictionary attack with a rule

t h s Demo Dictionary attack with a mask

t h s Demo Cracking a password-protected PDF file

t h s Demo Cracking a password-protected DOCX file

Resources Tools Dictionaries Hashcat Probable Wordlists https://hashcat.net/ https://github.com/berzerk0/Probable -Wordlists pdf2john.pl, office2john.py (John the Ripper) Electronic Frontier Foundation https://www.openwall.com/john/ https://www.eff.org/pl/deeplinks/2016 /07/new-wordlists-random- passphrases