Re: Password Crackers

From: Peter Wood (peterw@firstbase.co.uk)
Date: Wed Feb 15 2006 - 06:56:28 EST


We use the following:

lmcrack
Ophcrack
Cain & Abel with Rainbow tables
SAMinside

regards
Pete

At 13:12 14/02/2006 -0500, xelerated wrote:
>List,
>As some of you may know, @stake has been bought by
>symantec. And if that wasnt bad enough, they are no longer
>selling LC5 after the end of this month.
>And they have no plans on a replacement product.
>
>In my experience, LC5 was about the best thing for speedy
>assessment of the password policy. Sure LC5 will still have
>some use for awhile to come, but then what?
>
>I know there are lots of other options, LCP, john, rainbow tables,
>and more, but as far as I know, nothing is near as speedy
>as LC.
>
>What are your thoughts? Is there something out there as fast or close?
>
>I had enough trouble getting an old junk PC for doing nessus scans on,
>so i know
>a cluster is out of the question.
>
>Thanks!
>Chris

--------------------------------------------------------------------
Peter Wood FBCS CITP MIEEE MIMIS CISSP
Chief of Operations
First Base Technologies
Office: +44 (0)1273 454525
Mobile: +44 (0)7774 239915
www.fbtechies.co.uk
www.white-hats.co.uk

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:

Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers do!
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:55:32 EDT