2KKUU7ita

188
Part III: Hacking Network Hosts
Figure 10-2:
Loading
password
hashes from
a remote
SAM database
in
ophcrack.
3. Load the program by selecting the ophcrack icon from your Start
menu.
4. Click the Load button and select the type of test you want to run.
In this example, shown in Figure 10-2, I’m connecting to a remote server
called test1. This way, ophcrack will authenticate to the remote server
using my locally logged-in username and run pwdump code to extract
the password hashes from the server’s SAM database. You can also load
hashes from the local machine or from hashes extracted during a previous
pwdump session.
The extracted password hash usernames will look similar to those
shown in Figure 10-3.
5. Click the Launch icon to begin the rainbow crack process.
The process can take a little while depending on your computer’s speed.
Three of the long, random passwords I created for my test accounts
were cracked in just a couple of minutes, as shown in Figure 10-4. The
only reason the fourth wasn’t cracked is because it had an exclamation
point on the end and I was using ophcrack’s smaller “10k” alphanumeric
character set that doesn’t test for extended characters. ophcrack has
other options that test for extended characters, so even the more creative
passwords can be cracked.