Hashcat

Exactly.

So you take that ticket offline, you load it onto a machine with massive GPU processing power, and you just run it through password cracking tools like Hashcat.

Right.

You are just guessing passwords, hashing them, and seeing if they decrypt the ticket.

So they exfiltrate those files, take them back to their own infrastructure, and crack them offline.

Using massive DPU rigs with Hashcat or something.

Yep.

And your EDR has absolutely no visibility into what happens on the attacker's hardware.

But once we Kerberos those accounts, then we're trying to crack the passwords.

So load up Hashcat and then try and crack the passwords.

And that's just, it's a very, very quick and easy win because Kerberosting does not take very long.

I guess the longest part would be cracking hashes.

46.

Crack Wi-Fi Handshake Using Hashcat in Windows You can use GPU power for hacking the world.

47.

Attack Default SSH Username Passwords Using Metasploit This is a quick tutorial for using Metasploit to attack default usernames and passwords in our lab environment.

Oh yeah, thank you.

Hydra's in there, Hashcat's in here, NetExec, various DNS tools, web exploits, framework exploits, binary analysis tools.

Fuzzers.

Yeah, there's a lot of really good stuff in here.

Oh yeah, thank you.

Hydra's in there, Hashcat's in here, NetExec, various DNS tools, web exploits, framework exploits, binary analysis tools.

Fuzzers.

Yeah, there's a lot of really good stuff in here.