Go H*ck Yourself by Bryson Payne

Author:Bryson Payne [Bryson Payne]
Language: eng
Format: epub
Publisher: No Starch Press
Published: 2022-01-17T16:00:00+00:00

Stealing Windows Password Hashes

In this section, we’ll use your Kali Linux VM to steal password data from your Windows 10 VM. First, we’ll create several usernames and passwords in the Windows 10 VM. Next, we’ll use the Meterpreter remote access trojan to break back into the Windows VM. Then, we’ll use the Mimikatz tool in Metasploit to steal the password hashes from the Windows 10 victim machine.

Creating Windows Users

First, let’s add some users to the Windows 10 VM so we can later steal their password hashes.

Open your Windows 10 VM in VirtualBox (logging in with IEUser and Passw0rd!).

Enter cmd into the Windows search bar, right-click the Command Prompt app, and click Run as administrator. Click Yes when Windows asks if you want to allow this app to make changes to your device.

Create a new user account with the same command we used during the Sticky Keys hack back in Chapter 2: C:\WINDOWS\system32> net user ironman Jarvis /add

This command adds a user called ironman with the password Jarvis.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.