In this lecture, we are going to see how we can crack Windows passwords with John.
Don Draper is one of the most popular password tracking tools available in most penetration testing
distributions.
Like Lennox Barrett was sector.
It has a user friendly command line interface and has the ability to crack most password types.
In this lesson, we are going to see how we can use John to create Windows passwords.
This tool is useful in a scenario where you have a physical access to a system is password logged.
It can be used to quickly crack the password.
Remember, we are actually cracking the password and not bypassing it and it may take some time.
The tag will work in two steps.
In step one, we are going to get the hash from the same file and then we are going to get the hash
with John.
But this attack, we need to have a lifeboat USB.
You can check the lecture Kali Linux as a bootable USB drive to learn how to make a bootable USB.
Removed from Linux, USB drive, plug in USB to target PC and boot from it.
No navigate to windows system32 config folder and copy same and system files to the desktop.
Now open the terminal on the desktop and dump hashes with the given command.
Similar to the tool we are using, hash to text will contain all hashes that we are aiming to collect.
Once we have the hashes.
Greg the password is Jones in dictionary file.
You can use the command as shown on the screen.
If your password is complex, you can try all traditionally.
But first we need to uncompressed the file.
So use the unzip command as shown on the screen to uncompressed the file.
So to use John with Rog, traditionally use the command as shown on the screen.
Here is the dictionary and hashCode text is the hash file that we are aiming to correct.
And once the password is correct, it will be displayed on screen.
If you want to try some other dictionaries against the passwords.
I have already provided the link in the presentation.
No.
Let's see the demonstration.
First of all, plug in your goal life as we in your target PC and boot from it.
To the life system to boot.
Double click on the Windows Volume date Navigate to Windows.
System32.
Config folder.
And copy said and system files to the desktop.
Right click on the desktop.
And choose the option to open terminal here.
They use Sam W command to dump the ashes.
You can open your text file and see that our hashes are available.
No Greg these passwords with John using default only use the command John W flag.
Unless the password is correct, it will be displayed on screen.
Now, if you want to create the password to the lock judiciary that comes prebuilt in Linux, we need
to first uncompressed it.
First of all, look at where this dictionary is located to look at command.
They'll use the gunship command to compress it.
Now to use the dictionary, use John VW flag and give full part of our traditionally.
And execute the command.
Once the password is correct, it will be displayed on screen.
I hope you like this lecture and see you in the next lecture.