← Back to CourseLab // EHE-07Password Cracking: Responder, John & Hashcat
Score100/100
Legal Warning
These techniques are only legal against systems and credentials you own or have explicit written authorization to test. Running Responder or cracking hashes on unauthorized networks is a federal crime under the CFAA.
PhaseResponderJohnHashcatBonus
pentester@kali:~$
0 / 8 objectives0%
Objectives▼
Hints▼
Command Reference▼
help
Show available commands
objectives
Print current objective list
clear
Clear terminal output
responder -I eth0
Start LLMNR/NBT-NS poisoner
cat /tmp/hashes.txt
View captured NTLMv2 hashes
john --wordlist=... file
Dictionary crack with John
john --show file
Show cracked passwords
hashcat -m 5600 ...
NTLMv2 hashcat crack
hashcat --show file
Display hashcat results
Scenario Brief▼
Target Environment
NovaCorp internal network (192.168.10.0/24). Windows Active Directory domain: NOVACORP. Kali attacker: 192.168.10.5