Bash Bunny – stealing password hashes from locked workstations