Hello everyone. In this final video. We're going to
be taking a look at how to crack the various
windows hashes that we gathered from the Metasploit wall
three virtual machine. Now, as you as we
did, in the previous video, we were able to save them into a
file called hashes ms3, Dot txt and
given that we've already taken a look at how to crack the
windows ntlm hashes with John the
Ripper. Again. It's a very very simple to do. So we say to do John
and we set the format to
NT. And we can then say a word list is
going to be equal to user share word lists,
and we're going to say, rock you dot
txt and we will
then specify the files or hashes ms3 Dot
txt and hit enter. It's going to ask me for my
root privileges. So just specify them
right now. Just enter my password and we hit enter and
the cracking process begins and it looks like
we have a
It looks like we have some, some, some accounts
that have been cracked. In this case. We can see the
administrator account password is vagrant and the
account C-3PO, as a password of
protocol, we can try and use the fork option. So
we can say, we can say, specify the fork option
because of the there is no openmp support.
So it's a fork is equal to 4 and hit enter
and let's see whether we can crack anything more here. So
nothing more. What we can do is we can
Try and change our word list to something else. But
in this case, we've got the administrator password, which pretty much means
that we have total access to the system. And, of course, out
of the users that we were able to see. So,
for example, if you say cat hashes ms3, we
they are plenty of other users on the system and we can probably crack
them using the default, the John, the
Ripper word list. So if I can get
rid of the the customer list, which in this case is rock,
you we can get rid of that. And we it will
then
Is the default John the Ripper worldly. So again, this
is going to now, take computational power. And
of course, we can actually manage, we can actually monitor this Vigo into
a new terminal and hit th top. You can see my resource consumption is
now 100% because and now John is using
all my CPU power to crack these passwords. So
again, this is a, this is using
the default password list that was under
the John used Etsy user, share John
directory. So again, this will take depending on
the
Complexity of the password anywhere from a couple of minutes
to a couple of hours. And of course, it's also going to depend on the
on the amount of user accounts and passes that
currently exists. That being said, we've been able to get the administrator
password and we can actually test this out. So we
just try and open up or bring up the Windows Server here.
We can say log off and we
can then try and log in. So we can say input keyboard, Ctrl,
alt Elite and administrator and the
password is vagrant and we should be able to have access to the administrator.
There we are, and we now have access to
the administrator account. So, that was how to exploit the
Metasploit, wall, three virtual machine. It's a relatively simple
virtual machine to exploit. But again, it
is intentionally vulnerable for that. Same reason. It's there
to teach you the various techniques, especially the various exploitation
techniques and post exploitation techniques that
you can perform on Windows systems using a method using Metasploit and
the Metasploit console. So, thank you
very much for joining me in this course. I hope you
And a lot, I would love to have you back for
more courses. And I will be seeing you in
the next course.