‫So we imported hashas from a text file and now the time to crack the passwords.
‫After selecting the hash file, we can click next to jump to the next step.
‫And Kane gets the rose from the file and creates his table.
‫As you see, there are the users and there are the users passwords, elim and until hashes.
‫Select one of them, I'll choose administrator, right, click on the line under a dictionary, attack,
‫select and TLM hashes.
‫So we are in the dictionary attack windows now.
‫Dictionary list is empty at the moment, so we have to choose at least one dictionary to perform an
‫attack, right.
‫Click on the dictionary table and select add to list.
‫Now we need a dictionary, almost every tool has dictionaries by default, so I want to look at the
‫Cain folder to see if there is any program files x Eighty-six because Cain is a 32 bit application Cain.
‫Wordlist here, there's a wordlist text file, so let's look at its contents and just a little tip here.
‫I generally use notepad plus plus and Windows Systems, which is much more powerful than the original
‫notepad.
‫If you try to open this file with Windows notepad app, it may take a few minutes to open the file because
‫it's a really big one.
‫So right.
‫Click and select.
‫Edit with notepad plus.
‫Plus this is the word list.
‫If you look at the bottom of the notepad, you'll see that the file is almost three and a half million
‫lines.
‫OK, so I want to look at the word one, two, three, four QQQ uppercase.
‫Q which is the password of the administrator user.
‫The word list does not contain this word.
‫If we started the attack with this dictionary, we're just going to fail.
‫So I want to show you a successful attack.
‫So therefore I'll just add the word here.
‫So let me go down a bit, because I want to show the speed of the trials as well somewhere here, so
‫I'll add the word.
‫Save the file and close.
‫Now in Caen.
‫I'll add the word text file as a dictionary.
‫Now, here there are some options, most of the password cracking tools, including Cain, have these
‫kinds of options.
‫Password cracking tools do not just use words as they are.
‫They are also able to use the words in various forms, reverse, double lowercase, uppercase, adding
‫no behind the words, etc..
‫So we had the dictionary select the options and we're ready to launch the attack by clicking the start
‫button.
‫And now the cracking starts.
‫As you can see in the key rate field, Kane tries more than two million passwords a second.
‫Now there are three and a half million passwords to try, but don't forget the options selected.
‫Every word is tried, as is reverse, double numbers added, et cetera.
‫So there are tens of tries for a single line of the word list.
‫And here it is, Cain found the password from the hash in seconds.
‫Well done, Cain.
‫So in the table, the cracked password values are set by Cain, and do you see the password?
‫It's all uppercase.
‫So let's try another user.
‫I really don't know the password of this user.
‫So right.
‫Click Dictionary attack and TLM hashes same dictionary and start.
‫It makes more than two million tries per second this time.
‫And the attacks finished.
‫But we failed this time, we couldn't find the password with this small of a dictionary.