ntlm

Snagging Active Directory credentials over WiFi - Part 1

💡This issue has been fixed on Windows 8+ as part of MS16-112 issued in September 2016. I haven’t checked this on a Windows 7 machine which isn’t listed on the Microsoft page. Basics The basic theory behind the attack is same as @mubix’s discovery - if you

responder

Cracking NTLMv2 responses captured using responder

In the previous post, a Raspberry Pi Zero was modified to capture hashes (or rather NTLMv2 responses from the client). Let’s see how hashcat can be used to crack these responses to obtain the user password. I will be using dictionary based cracking for this exercise on a Windows