This one is not for routers, but every windows admin should be aware if you don&#x27;t use two factor auth your password hashes can be extracted from memory from every windows computer on your network that you logged into (until reboot).<p><a href="https:&#x2F;&#x2F;github.com&#x2F;funkandwagnalls&#x2F;ranger" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;funkandwagnalls&#x2F;ranger</a><p>&quot;Ranger is a command-line driven attack and penetration testing tool, which has the ability to use an instantiated catapult server to deliver capabilities against Windows Systems. As long as a user has -ONE- set of credentials or a hash set (NTLM, LM, LM:NTLM) he or she can gain access to systems that are apart of the trust.<p>Using this capability a security professional can extract credentials out of memory in clear-text, access SAM tables, run commands, execute PowerShell scripts, Windows Binaries, and other tools.
At this time the tool bypasses the majority of IPS vendor solutions unless they have been custom tuned to detect it. The tool was developed using our home labs in an effort to support security professionals doing legally and&#x2F;or contractually supported activities.&quot;