Jess the hacker runs L0phtCrack’s built-in sniffer utility which grabs SMB password hashes and stores them for offline cracking. Once cracked, these passwords can provide easy access to whatever network resources the user account has access to.
But Jess is not picking up hashed from the network.
Why?
A.
The network protocol is configured to use SMB Signing.
B.
The physical network wire is on fibre optic cable.
C.
The network protocol is configured to use IPSEC.
D.
L0phtCrack SMB filtering only works through Switches and not Hubs.
Explanation:
To protect against SMB session hijacking, NT supports a cryptographic integrity mechanism, SMB Signing, to prevent active network taps from interjecting themselves into an already established session.