Cain_and_Abel Tutorial From Chiranjit

Cain and Abel Network Security Pros Rob Matthew Ken Siple 9/29/2006

Network Security Pros

1

Trusted by over 1 million members

Try Scribd FREE for 30 days to access over 125 million titles without ads or interruptions! Start Free Trial Cancel Anytime.













Presentation of Cain & Abel features. 

Who uses it and why – Cain is used by network admins and security auditors to monitor traffic, see where users travel to and to test the robustness of the network security model – Cain is used by script kiddies the world over. It allows them to recover hidden password















Officially what Cain & Able is 

Cain & Abel is a password recovery tool for Microsoft Operating Systems. It allows easy recovery of several kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, revealing password boxes, uncovering cached passwords and















Cain’s Features Protected Storage Password Manager  Reveals locally stored passwords of Outlook, Outlook Express, Outlook Express Identities, Outlook 2002, Internet Explorer and MSN Explorer. Credential Manager Password Decoder  Reveals passwords stored in Enterprise and Local Credential Sets on Windows XP/2003.















Cain’s Features Cont: Dialup Password Decoder  Reveals passwords stored by Windows "Dial-Up Networking" component. APR (ARP Poison Routing)  Enables sniffing on switched networks and Manin-the-Middle attacks. Route Table Manager















Cain’s Features Cont: SID Scanner  Extracts user names associated to Security Identifiers (SIDs) on a remote system. Network Enumerator  Retrieves, where possible, the user names, groups, shares, and services running on a machine.

















Cain’s Features Cont: Sniffer  Captures passwords, hashes and authentication















Cain’s Features Cont: Full RDP sessions sniffer for APR (APR-RDP)  Allows you to capture all data sent in a Remote Desktop















Cain’s Features Cont: MAC Address Address Scanner Scanner with OUI finge fingerpr rprint int  Using OUI fingerprint, this makes an informed guess about















Cain’s Features Cont: Access (9x/2000/XP) Database Passwords Decoder  Decodes the stored encrypted passwords for Microsoft















Cain’s Features Cont: Enterprise Manager Password Decoder  Decodes passwords used by b y Microsoft SQL Server Enterprise















































































































































































































































Cain’s ARP-DNS 

This feature allows you to perform DNS spoofing attacks modifying DNS-Reply packets on the fly.















Cain’s APR-HTTPS 

APR-HTTPS enables the capture and the decryption of HTTPS traffic between hosts. It works in conjunction with Cain's Certificate Collector to inject fake certificates into SSL sessions, previously hijacked by mean of APR APR.. Using this trick it is possible to decrypt encrypted data before it arrives to the real destination performing a what so called Man-in-the-Middle attack.

 

Be warned that clients will notice this kind of attack because the server's certificate file injected into the SSL















Cain’s APR-HTTPS Cont:















Cain’s APR-HTTPS Cont:















Cain’s VOIP Sniffer 



The VoIP (Voice over IP) sniffer captures conversations from the network and records them to your hard disk. If seen by the sniffer, voice data is captured in each direction (caller<>responder) and then saved accordingly as mono or stereo WAV files. Although not required, if used with APR APR,, this feature enables to silently intercept VoIP

















Cain's VOIP Cont:















Cain's Wireless Scanner 

Cain's Wireless Scanner detects Wireless Local Area Networks (WLANs) using 802.11x. (A/B/G, I & N)















Cain's Wireless Scanner Cont:















Abel's Features: Remote Console  Provides a remote system shell on the remote machine.















What is the Abel's main purpose ? Abel provides a remote console on the target machine, it can dump user hashes from the remote SAM database even if it













































Can I reset/modify an enable password



























































































Cain_and_Abel Tutorial From Chiranjit

Recommend Documents