Wce cooperates with rainbow table to crack the user HASH of windows
Wce
Ls / usr/share/wce
Wce-l lists the HASH of users who have logged in to windows, obtains the HASH of domain users, and uses tools to work with rainbow table cracking (http://www.project-rainbowcrack.com/table.htm http://www.freerainbowtables.com). In about 1 minute, the password will come out.
Johnny can crack the HASH to get the password.
Cd / usr/share/rainbowcrack (there are many tools under rainbowcrack)
Rtgen ntlm loweralpha 6 60 3800 335540 0 (making rainbow table) (6-digit password, 335540 chains)
Then use rtsort * .rt (sort)
Then use rcrack to crack windows's HASH.
