Sniffing and capturing traffic

In this section, we will see the practical use of what we learned in Chapter 4, Sniffing and Spoofing, on sniffing and capturing tools. When we ran these tools in Chapter 4, Sniffing and Spoofing, we captured both NTLM and clear-text passwords. We also found the location of prime targets. Here, we are going to use the golden keys gathered from the fruits of our labor. Normally, the first time you capture a hash and you look at it, you think, What can I do with that? It's encrypted. After all, weren't you told that, if it is encrypted, then it's protected? The truth is, over half the time when I breach a Windows system, I don't know the actual password. Why spend time cracking a password when you can just Pass the Hash?

Using Ettercap...