RE: Hydra For Windows?

From: Dino Dogan (ddogan@navisys.com)
Date: Tue Oct 24 2006 - 18:19:52 EDT


Cant you use L0phtCrack for that. Instead of using built in dictionary ,
you could load your own list.

Dino Dogan
Network Engineer
NaviSys
499 Thornall Street
Edison, NJ 08837-2235
www.navisys.com
732.767.3828 PH
732.635.9576 FX
NaviSys has been acquired by Accenture.
Find out more.

-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com]
On Behalf Of Mister Dookie
Sent: Monday, October 23, 2006 11:56 AM
To: pen-test@securityfocus.com
Subject: Hydra For Windows?
Importance: Low

Hello list,

I am looking for a way to test the computers on my network for weak
passwords. For instance, say I have the network (192.168.123.1-254)
for company "Tomcat" and I know most people either login as
"Administrator" (not the best I know but some battles are not worth
fighting) or the convention of LastName + First Initial. I just want
to be able to scan the network to make sure people aren't using the
company name or a simple derivation of the company name as their
password. Therefore, I just want to scan the user names on the network
against a small list of passwords like Tomcat, Tomcat1, TomCat,
TomCat1, tomcat, tomcat1 and so forth. If people are using the company
name as the password I can have them change it. That's all I want.

Is there a good (hopefully freeware but doesn't have to be) program
out there to help me accomplish this task?

Thanks,
John

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=7016
00000008bOW
------------------------------------------------------------------------

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:14 EDT