Here is How to Hack Windows/Mac OS X Login Password (When Locked)


Here is How to Hack Windows/Mac OS X Login Password (When Locked)


Here is How to Hack Windows/Mac OS X Login Password (When Locked)

A Security researcher has discovered a unique attack method that can be used to steal credentials from a locked computer (but, logged-in) and works on both Windows as well as Mac OS X systems.

In his blog post published today, security expert Rob Fuller demonstrated and explained how to exploit a USB SoC-based device to turn it into a credential-sniffer that works even on a locked computer or laptop.

Fuller modified the firmware code of USB dongle in such a way that when it is plugged into an Ethernet adapter, the plug-and-play USB device installs and acts itself as the network gateway, DNS server, and Web Proxy Auto-discovery Protocol (WPAD) server for the victim's machine.

The attack is possible because most PCs automatically install Plug-and-Play USB devices, meaning "even if a system is locked out, the device [dongle] still gets installed," Fuller explains in his blog post.

"Now, I believe there are restrictions on what types of devices are allowed to install at a locked out state on newer operating systems (Win10/El Capitan), but Ethernet/LAN is definitely on the white list."

Read also 

How does the Attack Work?


You might be wondering: Why your computer automatically share Windows credentials with any connected device?

That is because of the default behavior of Microsoft Window’s name resolution services, which can be abused to steal authentication credentials.

The modified plug-and-play USB Ethernet adapter includes a piece of software, i.e. Responder, which spoofs the network to intercept hashed credentials and then stored them in an SQLite database.

The hashed credentials collected by the network exploitation tool can later be easily brute-forced to get clear text passwords.

Apparently, to conduct this attack, attackers would require physical access to a target computer, so that they can plug in the evil USB Ethernet adapter. However, Fuller says the average time required for a successful attack is just 13 seconds.

You can watch the video demonstration below that shows Fuller's attack in action.

Fuller successfully tested his attack against Windows 98 SE, Windows 2000 SP4, Windows XP SP3, Windows 7 SP1, Windows 10 Enterprise and Home (but not Windows 8), as well as OS X El Capitan and OS X Mavericks. He’s also planning to test it against several Linux distros.

Fuller tested the attack with two USB Ethernet dongles: the USB Armory and the Hak5 Turtle. For more detailed explanation, you can head on to his blog post.

Read Next  
Read Also        : 
Read More :      



Warning! Just an Image Can Hack Your Android Phone — Patch Now
Warning! Just an Image Can Hack Your Android Phone — Patch Now
.
Earthquake magnitude  between 3.0 and 4.0  According to USGS near California and Nevada
Earthquake magnitude between 3.0 and 4.0 According to USGS near California and Nevada

According to USGS this is the last news about earthquake magnitude 2.5+u.s. (adsbygoogle = window.adsbygoogle || []).push({});    


Earthquake magnitude  between 3.0 and 4.0  According to USGS near California and Nevada
Statement from President Donald J. Trump and First Lady Melania Trump on the Passing of Former Presi

Statement from President Donald J. Trump and First Lady Melania Trump on the Passing of Former President George H.W. Bush. (adsbygoogle = win


Earthquake magnitude  between 3.0 and 4.0  According to USGS near California and Nevada
Marvel Comics Giant Stan Lee Has Died At 95

Stan Lee, the colorful Marvel Comics patriarch who helped usher in a new era of superhero storytelling -- and saw his creations become a giant influen


Earthquake magnitude  between 3.0 and 4.0  According to USGS near California and Nevada
How Does Android s New In-app Updates API Work

Notice that the Android§apostrofe§s new In-app Updates API doesn§apostrofe§t force or lock out users from the app if they chose no


Earthquake magnitude  between 3.0 and 4.0  According to USGS near California and Nevada
An armed man who killed 12 people during a shooting in Thousand Oaks is considered a former sailor

News about the incident of 12 killed 12 killed I§apostrofe§m very worried about them A gunman in a crowded Southern California bar sent people div


Earthquake magnitude  between 3.0 and 4.0  According to USGS near California and Nevada
7 company will never see another dollar from you

7 / Terminix : basilcinnamonchives  said “My roommate at the time worked on a farm. We were aware of the possiblity he could bring fle



© 2013-2020 best of geeks. All rights reserved.