BI TP THC HNH AN TON & BO MT THNG TIN PHN 2 : AN TON V BO MT H THNG (12 tit) Bi 1 : Sao l !" #$%&' !

( li) B 1: Khi ng my vo log on Admin , vo th mc C: to th mc (Duli u! v cc "il h1#t$t , h%#t$t & '(u ) vo D: to th mc B(c*u+ B%: ,t(-t . /-og-(m' .Acc ''o-i ' . ,y't m' 0ool' . B(c*u+ .ti c1( '2 3 lcom .45 d6u ch7n 8 Al9(y' 't(-t in 9i:(-d mod . Clic* ch7n Adv(nc ;od . ti c1( '2 B(c*u+ <tility ch7n t(4 B(c*u+ . clic* vo d6u =>? ti C: v nh d6u ch7n vo 8 Duli u . ti c1( '2 B(c*u+ m di( o- "il n(m ch7n t(4 B-o9' @ . chA Bng dCn tDi D:EB(c*u+ v lu "il 4(c*u+ vDi tFn (4*1#4*"!# ,(u ) ch7n ,t(-t B(c*u+ .ti c1( '2 B(c*u+ Go4 Hn"o-m(tion ch7n ,t(-t B(c*u+# ,(u *hi B(c*u+ /-og- '' $ong . Io D:EB(c*u+ J *iJm t-( $ m c) "il =4*1#4*"? ch( K BL : vo C:EDuli u , clic* nMt +hNi chut t-Fn h1#t$t . /-o+ -iti ' . t(4 O n -(l . ch7n Adv(nc .45 d6u ch7n Pil i' - (dy "o- (-chiving BQ : ; "il h1#t$t nhR+ thFm vo ni dung v lu li .clic* chut +hNi t-Fn h1#t$t . /-o+ -iti ' . t(4 O n -(l . ch7n Adv(nc d @ . 45 d6u ch7n Pil i' - (dy "o- (-chiving BS : ; chTng t-Unh B(c*u+, ti c1( '2 B(c*u+ <tility ch7n t(4 B(c*u+ .Clic* d6u V>W ti C: v nh d6u ch7n vo 8 dX liYu .ti mc B(c*u+ m di( o- "il n(m gZ =D:EB(c*u+Edi"#4*"? .ch7n ,t(-t B(c*u+ .ti c1( '2 B(c*u+ Go4 Hn"o-m(tion ch7n Adv(nc @ .ti c1( '2 Adv(nc d B(c*u+ [+tion' , ti mc B(c*u+ 0y+ ch7n Di"" - nti(l . [K .,t(-t B(c*u+ B\ : ti c1( '2 B(c*u+ <tility ch7n t(4 ] 'to- (nd ;(n(g ; di( v clic* d6u V>W ti mc di"#4*" .Clic* d6u V>W ti C: v ch7n Duli u (chA c) h1#t$t ^c 4(c*u+!# ,(u ) )ng cc c1( '2 , *_ ti_+ vo th mc C:EDuli u . Clic* chut +hNi t-Fn h1#t$t ./-o+ -iti ' .t(4 O n -(l . Adv(nc d @ (nh d6u ch7n mc Pil i' - (dy "o- (-chiving B` : ; "il h%#t$t nhR+ thFm ni dung v '(v li .Clic* chut +hNi t-Fn h%#t$t . /-o+ -iti ' .t(4 O n -(l . Adv(nc d @ (nh d6u ch7n mc Pil i' - (dy "o- (-chiving

 Ba: ; chTng t-Unh B(c*u+ .ch7n t(4 B(c*u+ , '(u ) clic* d6u V>W ti C: , nh d6u ch7n vo 8 Duli u, ti mc B(c*u+ m di( o- "il n(m gZ D:EB(c*u+Einc#4*" , '(u ) ch7n ,t(-t B(c*u+ Bb: ti c1( '2 B(c*u+ Go4 Hn"o-m(tion ch7n Adv(nc d @ . ti c1( '2 Adv(nc d B(c*u+ [+tion' , clic* vo mc B(c*u+ 0y+ v ch7n Hnc- m nt(l .[K .,t(-t B(c*u+# B1c: ti c1( '2 B(c*u+ <tility ch7n t(4 ] 'to- (nd ;(n(g ; di( , clic* d6u V>W ti mc inc#4*", *_ ti_+ clic* d6u V>W ti mc C:EDuli u B* 2 : +,STO+, -ATA B1 : d)( th mc Duli u B%: ; chTng t-Unh B(c*u+ .ch7n ; nu 0ool' .[+tion' .t(4 ] 'to- . nh d6u ch7n vo mc ] +l(c th "il on di'* only i" th "il on di'* i' old BL: ti c1( '2 B(c*u+ <tility .vo t(4 ] 'to- (nd ;(n(g ; di( . clic* v(o "il .4*1#4*" . C: v nh d6u ch7n vo Duli u . Ch7n ,t(-t ] 'to- . ti c1( '2 con"i-m - 'to- ch7n [K# B* . : /& 0o&t1ol Pa&2l B1 : Io ,t(-t . ]un .;;C . [K B% : ,e $u6t hiYn mn hUnh Con'ol 1, ch7n Pil .Addf] mov ,n(+gin .Add .ti c1( '2 Add ,t(nd(lon ,n(+gin .O-ou+ /olicy [4h ct idito- .Add .Pini'h# BL : 0i mn hUnh Con'ol 1, ch7n Pil .,(v (' (ti c1( '2 '(v in ch7n D 'to+ v Pil n(m : joc(l /olicy! BQ : Io joc(l /olicy .joc(l Com+ut - /olicy . <' - Con"igu-(tion . Admini't-(to- 0 m+l(t ' .Cont-ol /(n l BS : Io /-ohi4it (cc '' to th Cont-ol /(n l ./-o+ -ti ' (nh d6u ch7n in(4l , '(u ) (++ly v [K! B\ : Io ,t(-t . ]un .cmd .g+u+d(t f"o-c

B* 3 : G$i &$4& 5 6 t17&$ 89&' &$4# (:o'o&) B1 : ,t(-t ./-og-(m' .Admini't-(tiv 0ool' .joc(l , cu-ity /olicy .joc(l /olici ' . Audit /olicy . Clic* chut +hNi lFn Audit Account jogon iv nt' . /-o+ -ti ' . nh d6u ch7n P(ilu- . A++ly . [K .cR+ nhRt +olicy (g+u+d(t E"o-c ! B% : ,t(-t ./-og-(m' .Admini't-(tiv 0ool' .iv nt vi 9 - . clic* chut +hNi lFn , cu-ity . ch7n Cl (- (ll v nt' . ch7n ko# B* ; : N,T<O+= MON*TO+*NG

Ch7n % my tlnh : my tlnh 1 c) m( chA H/ :1b%#1\a#1#1 v my tlnh % c) m( chA H/ : 1b%#1\a#1#%# B1: ,t(-t . , tting' .Cont-ol /(n l . Addf] mov /-og-(m' . Addf] mov 3indo9' Com+on nt .ch7n mc ;(n(g m nt (nd ;onito-ing 0ool' .Details .nh d6u ch7n vo 8 k t9o-* ;onito-0ool' .[K . k $t# B% : ,t(-t .Admini't-(tiv 0ool' .k t9o-* ;onito- .ti c1( '2 ;ic-o'o"t k t9o-* ;onito-, ch7n [K .ti c1( '2 , l ct ( n t9o-*, clic* d6u V>W mc joc(l Com+ut - . ch7n c(-d jAk . [K BL : 0i c1( '2 k t9o-* ;onito- . ch7n C(+tu- .,t(-t# (ChM n J nguyFn mn hUnh k t9o-* ;onito-! BQ : ,t(-t .]un .gZ cmd .t( dong lYnh +ing m( chA H/ giX( % my tlnh : +ing 1b%#1\a#1#1 v +ing 1b%#1\a#1#%# BS : pu(y li mn hUnh k t9o-* ;onito- . ch7n C(+tu- .,to+ (nd Ii 9 . dou4l clic* t-Fn dqng c) +-otocol l HC;/

B* > : *P S,0?+*T@ (*P S,0)

Ch7n % my tlnh : my tlnh 1 c) m( chA H/ : 1b%#1\a#1#1 v my tlnh % c) m( chA H/ : 1b%#1\a#1#%# B1 : ,t(-t .]un .gZ ;;C .ti c1( '2 Con'ol .ch7n ; nu Pil . Addf] mov ,n(+gin .ti c1( '2 Addf] mov ,n(+gin , ti mc ,n(+ in (dd to : Con'ol ]oot, '(u ) ch7n Add .Kro th(nh t-^t ch7n mc H/ , cu-ity /olicy ;(n(g m nt .ch7n Add . ti c1( '2 , l ct Com+ut - oDom(in , ch7n 8 joc(l Com+ut - .Pini'h .Clo' .[K B% : 0i c1( '2 Con'ol1 .clic* chut +hNi t-Fn H/ , cu-ity /olici ' on joc(l Com+ut - .ch7n C- (t H/ , cu-ity /olicy.ti c1( '2 3 lcom ch7n k $t . ti c1( '2 H/ , cu-ity /olicy k(m gZ VH/, c 4(ng /- 'h(K yW vo 8 n(m .k $t . ti c1( '2 ] su 't "o- , cu- Communic(tion, 45 d6u ch7n ti mc Activ(t th d "(ult . k $t . Pini'h .ti c1( '2 0 't H/ , c /- 'h(- K y /-o+ -ti ' . ch7n Add .ti c1( '2 3 lcom . k $t . ti c1( '2 0unn l ind+oint ch7n 0hi' -ul do ' not '+ ci"y ( tunn l . k $t . ti c1( '2 k t9o-* 0y+ , ch7n 8 joc(l (- ( n t9o-* jAk .k $t.ti c1( '2 H/ Pilt - ji't, ch7n mc All H/ .k $t .ti c1( '2 Pilt - Action , ch7n mc ] sui- , cu-ity . k $t .t-ong c1( '2 Auth ntic(tion ; thod, ch7n mc <' thi' 't-ing to +-ot ct th * y $ch(ng , t-ong h+ thoi gZ V1%LW .k $t .Pini'h# BL : 0i c1( '2 Con'ol1, clic* chut +hNi lFn H/, c 4(ng /- 'h(- K y . A''ign .lu Con'ol1 -( mn hUnh D '*to+ .)ng cc c1( '2 (ng c) v cR+ nhRt /olicy(g+u+d(t f"o-c ! BQ : ,t(-t ./-og(-m' .Admini't-(tiv 0ool' ., -vic ' .clic* chut +hNi lFn H/,iC , -vic , ch7n ] 't(-t#

 BS: ; chTng t-Unh k t9o-* ;onito- .ch7n C(+tu- .,t(-t B\ : ,t(-t .]un .cmd .t( dong lYnh +ing m( chA H/ giX( % my tlnh : +ing 1b%#1\a#1#1 v +ing 1b%#1\a#1#% B` : pu(y li mn hUnh k t9o-* ;onito-. ch7n C(+tu- . ch7n ,to+ (nd Ii 9 . dou4l clic* t-Fn dqng c) /-otocol l i,/ .ch7n mc i,/# Bi A : B C& lD loEal PaFFGo1! kh chMng t( t h7c +hun ln thuy_t, ;odul ,y't m v(c*ing 4(o gwm nhXng *x thuRt l6y <' -n(m v /(''9o-d, nyng suyzn t-ong hY th{ng, '1 dng * ylog - J l6y th8ng tin c|( {i +hTng(t-ong 4Dc ny c}ng c) thJ v(c* - J li 0-oh(n, v6n z h7c chTng ti_+ th o!, ~n th8ng tin c|( +-oc '' (ng hot ng(]oot*it!, v $)( nhXng log hY th{ng# 0-ong 4i tR+ ny t( '1 dng +hum mzm Cain J *iJm t-( +(''9o-d c|( u' -# Bc 1 0( ci +hun mzm CAHk vo my {i +hTng 0o mt u' - longdao t cmd :
C:\Documents and settings\longdt>user net longdao 12345 /add

Bc 2 : BRt +hum mzm C(in v ch7n Import Hashes from local system yy chMng t( th6y c) L ch_ , Import hash from local system?, t( '1 dng "il ,A; c|( hY th{ng hiYn ti J l6y h('h c|( (ccount(*h8ng c) mt h)( 'y'* y!, [+tion Hm+o-t v('h ' "-om t $t "il , th8ng thBng t $t "il ny l l6y t /9dum+(lu h('h c|( (ccount hY th{ng dDi dng *h8ng 4m mt h)(!, [+tion th L l *hi chMng t( c) 'y'* y v "il ,A; 4m mt h)( 4i 'y'* y# C( 4( t-Bng h^+ n_u nhR+ uy | th8ng tin chMng t( zu c) thJ c) h('h c|( (ccount *h8ng 4m mt h)( 4i 'y'* y#

D( vo th8ng tin h('h ny +hun mzm 'e 4-ut "o-c J tUm *i_m +(''9o-d c|( (ccount# Bc 3 : Ch7n u' - cun c-(c* mRt *h~u

Bc 4 : c-(c* mRt *h~u dong B-ut force N !" hash 0-ong 4i t( ch7n u' - longdao, *lch +hNi tFn u' - v( chon v ch7n Br#te force theo N !" hash#Ch7 start# ,(u *hi ch7n ch_ ny t( th6y /C 4t uu tlnh ton v cho -( *_t suN#

$%t &#' : pass(ord of longdao #ser is 1234)