Attacking Authentication: Passwords, Hashes, and Beyond

Authentication is often the weakest link. In this session, we'll walk through practical techniques for breaking authentication mechanisms, from brute-forcing a web login with Hydra to capturing and cracking NTLMv2 hashes on a Windows system. Participants will get hands-on experience in their own lab environment and leave with skills directly relevant to OSCP preparation.