Report password cracking (2)

Nhóm : GVHD: Trần Quốc Dũng Phạm Văn Tính Nguyễn Hải Đăng Nguyễn Hồ Vương Trương Quang Minh

Password Crack ,[object Object],[object Object],[object Object],[object Object],[object Object]

SAM ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

System key technology ,[object Object],[object Object],[object Object],[object Object]

System key ,[object Object],[object Object],[object Object],[object Object]

SAM Registry key ,[object Object],[object Object]

SAM on Storage Subsystems ,[object Object],[object Object],[object Object],[object Object]

SAM on Network ,[object Object],[object Object]

II.CƠ CHẾ MÃ HÓA PASSWORD CỦA WINDOWS

MÃ HÓA PASSWORD TRONG WINDOWS ,[object Object],[object Object],[object Object],[object Object]

[object Object],[object Object],[object Object],LAN Manager-compatible password:

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],LAN Manager-compatible password:

LAN Manager-compatible password:

[object Object],[object Object],[object Object],[object Object],[object Object],LAN Manager-compatible password:

[object Object],[object Object],[object Object],[object Object],Windows Password(NT HASH)

Windows Password(NT HASH) PASSWORD/USER INFORM NT windows Hash

III.XỬ LÝ LOGON TRONG WINDOWS

XỬ LÝ LOGON TRONG WINDOWS LOCAL MACHINE LOGON DOMAIN LOGON

[object Object],[object Object],[object Object],[object Object],XỬ LÝ LOGON TRONG WINDOWS

[object Object],[object Object],[object Object],XỬ LÝ LOGON TRONG WINDOWS

LOCAL MACHINE LOGON process SAM DATAbase TOP HALF BOTTOM HALF M S V 1_0 Packet 1.Encrypt/hash 2.Send 3.Query 4.Send stored hash password User/password 5.compare Reply result

Some LAN Authentication protocols ,[object Object],[object Object],[object Object],[object Object]

NT LAN Manager Authentication ,[object Object],[object Object],[object Object]

[object Object],[object Object],[object Object],[object Object],NT LAN Manager Authentication

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],NT LAN Manager Authentication

[object Object],[object Object],[object Object],[object Object],[object Object],NTLMv1

NTLMv2 ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

DOMAIN LOGON ,[object Object],[object Object],[object Object],[object Object]

DOMAIN LOGON NetLogon service Bottom HALF SAM TOP HALF NetLogon service Logon Request 1.Send Hashed password 2.Send request 3.nonce 4.Merged password 5.Send m-p query reply 6.result 7.result

Cracking Password ,[object Object],[object Object],[object Object],[object Object]

Dictionary Attacks ,[object Object],[object Object],[object Object]

Hybrid Attacks ,[object Object],[object Object],[object Object],[object Object]

Brute force Attacks ,[object Object],[object Object],[object Object],[object Object]

Tool: Cain ,[object Object],[object Object]

Rainbow Attack ,[object Object],[object Object],[object Object],[object Object],[object Object]

Introduction ,[object Object],[object Object]

Brute force ,[object Object],[object Object],[object Object],[object Object],[object Object]

Time-memory Tradeoff ,[object Object],[object Object],[object Object],[object Object]

Xây dựng RainbowCrack ,[object Object],[object Object],[object Object],[object Object]

Step 1: Use rtgen program to generate rainbow tables ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Step 1: Use rtgen program to generate rainbow tables(cont) ,[object Object],[object Object],[object Object]

Step 1: Use rtgen program to generate rainbow tables(cont) ,[object Object],[object Object]

Select Good Parameters ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Commands ,[object Object],[object Object]

Commands(cont) ,[object Object],[object Object],[object Object],[object Object]

Step 2: Use rtsort program to sort rainbow tables ,[object Object],[object Object],[object Object]

Step 3: Use rcrack program to lookup rainbow tables ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Step 3: Use rcrack program to lookup rainbow tables(cont) ,[object Object],[object Object],[object Object],[object Object]

V.DEMO ,[object Object],[object Object],[object Object]

Demo Crack password trong LAN ,[object Object],[object Object],[object Object]

Demo Crack password trong LAN ,[object Object],[object Object]

Demo Crack password trong LAN

Demo : Physical- lấy file SAM ,[object Object],[object Object],[object Object],[object Object]

Demo: Physical- lấy file SAM ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

[object Object],[object Object],[object Object],[object Object],Demo: Physical- lấy file SAM

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Demo: Physical- Phá password

Demo : Sniffer password ,[object Object],[object Object],[object Object],[object Object]

Một số cách hạn chế password cracking. ,[object Object],[object Object]

Làm thế nào để có một mật khẩu bảo mật. ,[object Object],[object Object],[object Object],[object Object],[object Object]

Những khuyến cáo đặt password khác. ,[object Object],[object Object],[object Object],[object Object],[object Object]

Những khuyến cáo đặt password khác (tt). ,[object Object],[object Object],[object Object],[object Object],[object Object]

Report password cracking (2)

Recommended

Recommended

More Related Content

Similar to Report password cracking (2)

Similar to Report password cracking (2) (20)

More from phanleson

More from phanleson (20)

Recently uploaded

Recently uploaded (20)

Report password cracking (2)