Introduction

Here is a small list of files that can contain hashed passwords:

Windows	Linux
unattend.xml	shadow
sysprep.inf	shadow.bak
SAM	password

There are many tools and methods to utilize for login brute-forcing, like:

• Ncrack

• wfuzz

• medusa

• patator

• hydra

• and others.