Bashbunny QuickCreds demo

แชร์
ฝัง
  • เผยแพร่เมื่อ 19 พ.ย. 2024

ความคิดเห็น • 11

  • @jedidiahwayne9786
    @jedidiahwayne9786 3 ปีที่แล้ว +7

    How are the hashes useful? I wanna demo this to my friends but don't know how to decode the hashes. Please help

    • @typ0_cratz
      @typ0_cratz 3 หลายเดือนก่อน

      Those are NTLMv2 hashes. The ONLY way to use those is by cracking them. You need to use John the ripper or hashcat (or any other cracking software) and either bruteforce them or doing a dictionary attack.
      I don't know how this attack works, but if you are able to reuse it to grab the NTLMv1 hashes from memory, you don't even need to crack them, and can pass the hash to login.

  • @flacop2738
    @flacop2738 3 ปีที่แล้ว

    Hey brother how do I contact you

  • @user-gj5zy4ky2u
    @user-gj5zy4ky2u 3 ปีที่แล้ว

    how to reach you ??

  • @eyeball3723
    @eyeball3723 4 ปีที่แล้ว

    I am having trouble with the dependencies. They keep deleting do you think you could help?

    • @PhilippinesScam
      @PhilippinesScam 3 ปีที่แล้ว

      ditto
      they are supposed to be installing\installed but are not.

  • @PhilippinesScam
    @PhilippinesScam 3 ปีที่แล้ว

    does this work with microsoft account computers?

    • @ciscolivesecurityfan1136
      @ciscolivesecurityfan1136  3 ปีที่แล้ว

      Hello, I assume you are asking about domain joined computers. Most domain joined computers will allow users to login using locally even without a network connection (like when the user is travelling or on an airplane). Most likely will work.

    • @tenkei000
      @tenkei000 3 ปีที่แล้ว

      @@ciscolivesecurityfan1136 I took his question as using something like using your 365 account to log in or using Windows Hello

    • @ciscolivesecurityfan1136
      @ciscolivesecurityfan1136  3 ปีที่แล้ว

      @@tenkei000 Oh, I see what you mean. I don't believe this will work with Office 365 accounts or Windows Hello. Something new to test and break!

    • @PhilippinesScam
      @PhilippinesScam 3 ปีที่แล้ว

      @@ciscolivesecurityfan1136 yes, i was talking about microsoft online accounts.