MITRE: Credential Access: T1110.001 Help


Actually, I cant understand how can I use brute force? When I connect the admin@detect I found (I used /etc/shadow) victim password in hash (Im not sure this is right way), then I tried crack hashing but I cant. Please let illuminate to me about question ?

After connecting to the attack machine, you can perform brute force to find the victim’s password. You can use the tool specified in the task description along with the rockyou.txt wordlist. If there is no script available, you can copy and paste manually into the lab machine.

1 Like

For this, I went to the GitHub link given in the explanations section and included the files there in the system. Then I captured the password of the Brute-Force leaf user.

We can use following script to brute force the password:

2 Likes