Hauv Windows XP, cov passwords (tseeb dua, lo lus zais zais) yog khaws cia hauv SAM cov ntaub ntawv uas nyob hauv cov kab ke system32. Lub operating system tsis muab lub sijhawm los saib cov ntaub ntawv no. Cov hauv kev tseem ceeb los tshawb pom tus thawj tswj hwm tus lej ntawm lub network ib puag ncig yog tsheb hnia, siv los cuam tshuam password password, thiab brute force password rau cov chaw sib koom.
Nws yog qhov tsim nyog
- - kev pab cuam sniffer;
- - smbrelay chaw tso dej;
- - nqi hluav taws xob rau cov lej siv brute-force passwords.
Cov Lus Qhia
Kauj ruam 1
Xa cov email hauv HTML daim ntawv rau tus thawj tswj hwm ntawm tej thaj chaw deb me me. Muab qhov sib txuas hauv cov ntawv sau, piv txwv, rau ib daim duab uas muaj nyob ntawm qhov khoom siv sib koom siv hauv koj lub computer. Tom qab tus neeg xa ntawv qhib ntawv, tsab ntawv thov yuav raug xa kom qhib cov ntaub ntawv los ntawm cov peev txheej sib koom. Thaum kev sib txuas ntawm qhov sib faib siv cov khoom siv smbrelay, cuam tshuam rau LanMan hash.
Kauj ruam 2
Yog tias tus lej “Nkag Mus Tsev” tus lej tsis raug kaw (thiab vim li ntawd kev nkag mus rau hauv qhov system npe tau txais kev tso cai), tso cov chaw tswj hwm chaw taws teeb rau hauv cov ntaub ntawv sib qhia. Hauv cov ntawv sau npe tseem ceeb HKCU / Software / Microsoft / Windows / CurrentVersion / Khiav, tsim ib qho kev taw qhia rau txoj kev mus rau qhov kev pab cuam no.
Kauj ruam 3
Txhawm rau siv cov cuab yeej saib xyuas tej thaj chaw deb, siv qhov "Explorer" yuam kev thaum tuav cov ntawv txuas ntxiv. Tsim cov ntawv sau cov ntaub ntawv npe hu ua Readme.txt, uas yuav tsim kom muaj kev qhia nrog rau kev nkag mus rau tsav C. Muab nws lub npe tsis txaus ntseeg, xws li TEMP $. Hauv qhov no, cov ntaub ntawv yuav tsim tawm yuav tshwm nrog lub txt txuas ntxiv, thiab hauv tib lub nplaub tshev nws yuav muaj qhov program rau kev tswj hwm computer hauv tej thaj chaw deb.
Kauj ruam 4
Txhawm rau nrhiav tus thawj coj lo lus zais rau lub khoos phis tawm Windows NT / 2000, siv ib qho ntawm lo lus zais brute-force utilities: NAT, RedShadow, Brurus-AE, lossis lwm yam uas tuaj yeem pom nyob hauv cov chaw pej xeem hauv Is Taws Nem. Hauv qhov no, lo lus zais tuaj yeem suav tau ob qho tib si hauv phau ntawv txhais lus thiab siv tshawb nrhiav yooj yim. Ntxiv mus, ob txoj kev yog qhov zoo tshaj plaws.