Broken Authentication - Offline Password Cracking
This lab provides an introduction to offline password cracking where we attempt to reverse an MD5 hash in order to find a user's password. We talk briefly about rainbow tables, password lists, and rule based hash cracking and see a brief demonstration of John the Ripper.
The first half of the lab is a XSS attack where we first steal a base64 encoded cookie that contains the md5 password hash of the user.