So I have a tendency to lose the passwords to VMs I’ve created over time, and when I want to access them I can’t remember the password or username. Here is a quick tutorial on using Ophcrack in bootable form to help us out. Sorry, video is old, just realized I never posted it.
Part 4 – Using Ophcrack from Deron Grzetich on Vimeo.
Disclaimer: Procrastination is one of my strong points.
The following video was created weeks ago (reference disclaimer). It visualizes the steps necessary to create custom shell code for the MS08-078 vulnerability. Because this is the first video I’ve compiled using iShowU, it lacks consistent commentary throughout. So, I had two options: create a detailed outline of the steps needed to build the shell code, or, post the video without explanation. For now I’ll choose the latter. If you need more information, please post comments and I’ll supplement my posting with homestarrunner links additional details.
/edit if you don’t like sandstorm, turn off your speakers.
Custom Shellcode MS08-078 from Austin Diener.
My contribution to security related sites with videos/tutorials is Security-Freak.net. I originally used the site for help with socket programming but found several tutorials on common security tools (e.g., dig, netcat, airodump-ng). Check it out and let me know what you think.
/edit It appears as though the site decided to go down in conjunction with my post. If you receive the Service Unavailable message, try again later.
/edit2 The site is back up.
For those of you who are getting sick of hearing Deron’s voice via Vimeo tutorial, I just wanted to post an honorable mention to http://www.irongeek.com. It is published by an individual with an affinity for computer security and getting buff. This is laughable on its own, but throw in the creator’s speech impediment, and you have yourself an extra dimension of funny.
Regardless, the “Hacking Illustration Videos” that he has posted on his site are pretty informative, and there is enough variety in topics that you’re guranteed to find at least one that will interest you.
Part 3 of the password cracking series is an overview of some of the tools and techniques used to obtain password hashes from a MS system.
Part 3 – Getting the password hashes – TDC477 from Deron Grzetich on Vimeo.
The second part of the password cracking video series. This section provides an overview of the MS LM and NTLM password hash formats and where theses are stored on local systems dn on Active Directory domain controllers.
Download the slides used in the presentation HERE
Part 2 – MS password hash overview from Deron Grzetich on Vimeo.
The video embedded below is a quick overview of the virtualization technologies and free MS software available to you as a DePaul student.
Part 1 – Building a security test lab – TDC477 from Deron Grzetich on Vimeo.