Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T1110.002_password-cracking
Adversaries may use password cracking to attempt to recover usable credentials, such as plaintext passwords, when credential material such as password hashes are obtained.
Passed 19 of 22 test cases with the skill, and 9 of 22 without it.
and 10 more in the full report
11 fixed8 passed either way2 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 11 test cases the skill fixed. Same model, same prompt, with and without the skill.
In an automated Atomic Red Team execution of T1110.002, engineers want to know which transformation rule set should be passed to Hashcat. While many tutorials recommend `best64.rule` or `d3ad60.rule`, state the specific rule file name used in the standard Atomic test for hash cracking.
| Checked | Without skill | With skill |
|---|---|---|
| Specifies Incisive-leetspeak.rule as the rule file name. | Missed | Passed |
The instructions your model reads when the skill loads.
Sub-technique of: T1110
Adversaries may use password cracking to attempt to recover usable credentials, such as plaintext passwords, when credential material such as password hashes are obtained. OS Credential Dumping can be used to obtain password hashes, this may only get an adversary so far when Pass the Hash is not an option. Further, adversaries may leverage Data from Configuration Repository in order to obtain hashed credentials for network devices.
Techniques to systematically guess the passwords used to compute hashes are available, or the adversary may use a pre-computed rainbow table to crack hashes. Cracking hashes is usually done on adversary-controlled systems outside of the target network. The resulting plaintext password resulting from a successfully cracked hash may be used to log into systems, resources, and services in which the account has access.
Platforms: Linux, macOS, Windows, Network Devices, Office Suite, Identity Provider
The following tests are from Atomic Red Team and provide actionable ways to test this technique:
Execute Hashcat.exe with provided SAM file from registry of Windows and Password list to crack against
Supported Platforms: windows Elevation Required: Yes
cd #{hashcat_exe}\..
test cases passed, vs 9 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.