1 00:00:00,330 --> 00:00:05,340 ‫Now we can turn back to Cain and import the hash file of one of our Windows victims. 2 00:00:06,120 --> 00:00:13,980 ‫OK, so where were we we run the and the Kracker tab, we click the L.M. and until I'm hashes on the 3 00:00:13,980 --> 00:00:21,990 ‫tree, the left hand side of the tool, then we click the plus icon in the toolbar menu and the ad hashes 4 00:00:21,990 --> 00:00:23,490 ‫from window appeared. 5 00:00:24,150 --> 00:00:27,870 ‫And now we're in the importing hashes phase. 6 00:00:30,390 --> 00:00:36,240 ‫The hash files are in my college, so I need to copy them into my Windows eight p.m. to be able to use 7 00:00:36,240 --> 00:00:36,990 ‫them in game. 8 00:00:38,080 --> 00:00:43,300 ‫You can use when SICP to transfer files from a Linux system to a Windows system. 9 00:00:43,750 --> 00:00:48,490 ‫Now, I don't want to spend too much time with how to download and install windows, so just Google 10 00:00:48,490 --> 00:00:48,610 ‫it. 11 00:00:48,610 --> 00:00:49,510 ‫It's very simple. 12 00:00:50,730 --> 00:00:52,420 ‫Myositis two to two. 13 00:00:53,380 --> 00:01:00,880 ‫When ACP uses the SS age connection, so SS age service has to be alive in Cali, so let's go to college 14 00:01:00,880 --> 00:01:02,500 ‫and check the SS age service. 15 00:01:03,570 --> 00:01:07,500 ‫First, I want to check if the service is running and no, it's not. 16 00:01:08,390 --> 00:01:12,590 ‫Type service, as I say, start to start the state service. 17 00:01:13,700 --> 00:01:22,610 ‫Type net stat to help to see the S.H. port, and it's 22 by default, but I changed the config before. 18 00:01:22,610 --> 00:01:26,650 ‫As you see, Mya's as a service is running on the port four for three. 19 00:01:27,050 --> 00:01:30,020 ‫Now, please don't forget to use your own, as I say, port. 20 00:01:30,020 --> 00:01:32,270 ‫And it's probably the port 22. 21 00:01:33,490 --> 00:01:41,260 ‫So back to Windows eight, and when Sepi set the stage port, which is four for three for me, when 22 00:01:41,260 --> 00:01:49,360 ‫Sepi Tool changed the protocol according to the port, but my service is SICP, not Web dev. 23 00:01:49,570 --> 00:01:51,970 ‫So I choose Sepi again. 24 00:01:54,050 --> 00:02:01,010 ‫Now, here's an important point, if you try to log in with WINEP using route user, you may see the 25 00:02:01,010 --> 00:02:02,360 ‫access denied message. 26 00:02:03,200 --> 00:02:08,660 ‫That just means using SSA service with route user is denied and your colleague machines, SSA service 27 00:02:08,660 --> 00:02:09,650 ‫configurations. 28 00:02:10,580 --> 00:02:17,630 ‫In Collie, either change the associate service config to be able to connect with root user or create 29 00:02:17,630 --> 00:02:20,330 ‫a new user to use S.H. connections. 30 00:02:21,210 --> 00:02:28,080 ‫To create a new user in your you can use the add user or user add commands on the terminal screen or 31 00:02:28,230 --> 00:02:31,230 ‫users interface of COLLY to add a new user. 32 00:02:32,440 --> 00:02:38,290 ‫I've already added a user before with the name S.H. User for this purpose. 33 00:02:39,250 --> 00:02:42,210 ‫You can add a similar user in your system if you want. 34 00:02:43,200 --> 00:02:48,900 ‫So now I can act when ACP using the S.H. user credential. 35 00:02:52,270 --> 00:02:54,230 ‫Well, you know, I forgot the password of the user. 36 00:02:54,250 --> 00:02:54,910 ‫Sorry about that. 37 00:02:57,150 --> 00:03:06,240 ‫So I'll go to college and type password SSA user to change its password and hit Enter Now because I'm 38 00:03:06,240 --> 00:03:12,120 ‫currently the route user, which is the most powerful user, I'm allowed to change another user's password. 39 00:03:12,960 --> 00:03:17,970 ‫So now I enter the new password Retype ID and the password is updated. 40 00:03:18,600 --> 00:03:23,190 ‫So now I can turn back to when Sepi and connect to Colly to transfer hash files. 41 00:03:24,470 --> 00:03:31,100 ‫Well, I'd like to do one more thing in Cali, so I'll copy the hash files inside the home folder of 42 00:03:31,100 --> 00:03:36,470 ‫the SSA user, which is the user I use to connect with the Winesap. 43 00:03:36,920 --> 00:03:37,940 ‫But why am I doing this? 44 00:03:38,480 --> 00:03:45,740 ‫Because this user is not a power user, so it cannot access the desktop folder of the root user. 45 00:03:46,320 --> 00:03:53,930 ‫Anyway, I copy the hash files into the home folder if S.H. User using CPP Linux command. 46 00:03:54,960 --> 00:04:03,060 ‫So now in when Sepi window, I'll refresh the college side, we're in the home folder of SFH user and 47 00:04:03,060 --> 00:04:08,520 ‫here are the hash files, so I'll copy it onto the desktop of Windows eight VM. 48 00:04:08,940 --> 00:04:10,350 ‫And there we go. 49 00:04:10,350 --> 00:04:13,700 ‫We're finished with WINEP, so I'll close it now. 50 00:04:15,030 --> 00:04:18,540 ‫Now we're finally ready to import the hash filing Cain. 51 00:04:22,270 --> 00:04:27,790 ‫Click the button next to the box and select the hash file we copy to the desktop seconds ago. 52 00:04:28,570 --> 00:04:31,390 ‫That's jus XP hashes for this example.