Skip to content

Commit dc1c11f

Browse files
Update README.md
1 parent 670216c commit dc1c11f

1 file changed

Lines changed: 12 additions & 0 deletions

File tree

  • 13 - Meterpreter Post Exploitation/04 - Hashdump
Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1 +1,13 @@
1+
# Hashdump
12

3+
- The `hashdump` command will list the content of the ***SAM database***.
4+
5+
- The `SAM` (Security Account Manager) database stores user's passwords on Windows systems.
6+
7+
- These passwords are stored in the `NTLM` (New Technology LAN Manager) format.
8+
9+
![image](https://user-images.githubusercontent.com/63872951/187254745-1ac2c6b0-0741-4884-b669-3c0150aec3ed.png)
10+
11+
- While it is `not` mathematically possible to "crack" these hashes, you may still discover the cleartext password using online NTLM databases or a rainbow table attack.
12+
13+
- These hashes can also be used in `Pass-the-Hash` attacks to authenticate to other systems that these users can access the same network.

0 commit comments

Comments
 (0)