Metasploit Basics, Part 20: Creating a Fake SMB Server to Capture Credentials

In a previous tutorials in this Metasploit Basics series, we learned how to use hashdump to pull password hashes from a local system. In "Cracking Passwords with Hashcat", you learned how to crack these hashes with hashcat. In each of these cases, the password hashes were the passwords of the users on the local system and not the domain. If the system is part of a domain (which is the case in most corporations and large institutions), they will likely have their password stored on the domain