In association with heise online

07 December 2007, 13:56

The article describes how an attacker can use hash injection attacks to access services on systems in a Windows network without knowing the plain text password. The attacker still needs to obtain the password hash from one computer's cached credentials, but he no longer requires the assistance of rainbow tables to crack the password. He can log onto the network with just the hash and a few tools.

Print Version | Permalink:
  • Twitter
  • Facebook
  • submit to slashdot
  • StumbleUpon
  • submit to reddit

  • July's Community Calendar

The H Open

The H Security

The H Developer

The H Internet Toolkit