Arp poisoning the WMF exploit
Saturday 14 January 2006 by Sleepless

A little video to give you an idea of some of the capabilities of the new mpentoo-beta.

This video uses the 184mb mpentoo-beta to run msfweb, ettercap, and some filters to exploit the wmf bug. Injecting the reverse_meterpreter payload allows for grabbing admin hashes easy, and www.plain-text.info was used to crack the hash.
Provided format are MP4, WMV and DivX.

Let us know what you think on email or irc.

Plaintoo in action
Thursday 20 April 2006 by Grimmlin

This video feature plaintoo, a frontend for the bkhive and samdump2 tools, used to retrieve LM and NTLM hashes from the windows SAM. The retrieved hashes can then be cracked on the Plaint-Text.info site.

The video was made by Sleepless, using the latest mini pentoo livecd. Plaintoo is available as a module here.

Provided format are MP4, WMV and DivX.

Let us know what you think on email or irc.