> reverse engineer their passwords
Elaborate?
Elaborate?
- E-mail aliasing and password resets
- Resetting root accounts directly in on prem systems
- Cooperative employees
- When you are the CFO paying the bills, you can usually work with cloud providers to recover access to SaaS solutions (password managers aside)
- Terminals left powered on and unlocked
I used 'hashcat', which is an open-source tool available on GitHub.
A few hours of GPU time will reverse about 50-80% of typical NT-hashed passwords, and 90% or more given a few days or weeks.
Once you have passwords of admin users or service accounts, you can use those to "trawl through" servers looking for plain-text passwords in scripts, scheduled tasks, documentation, source code, etc...