3 ms·

> reverse engineer their passwords Elaborate?

• aaaaaaaaaaab 4y ago
  Just run the hash function in reverse!
  • jiggawatts 4y ago
    I don't know why this was downvoted, because that is precisely what we did. I used 'hashcat', which is an open-source tool available on GitHub. A few hours of GPU time will reverse about 50-80% of typical NT-hashed passwords, and 90% or more given a few days or weeks. Once you have passwords of admin users or service accounts, you can use those to "trawl through" servers looking for plain-text passwords in scripts, scheduled tasks, documentation, source code, etc...
• mey 4y ago
  Obviously not parent, but there are a handful of approaches here. - E-mail aliasing and password resets - Resetting root accounts directly in on prem systems - Cooperative employees - When you are the CFO paying the bills, you can usually work with cloud providers to recover access to SaaS solutions (password managers aside) - Terminals left powered on and unlocked More importantly, such a decision would ideally include some transition planning including securing some level of access ahead of time.