Security Basics mailing list archives

Hydra or network logon cracker for Windows?


From: "Mister Dookie" <misterdookie () gmail com>
Date: Mon, 23 Oct 2006 11:53:28 -0400

Hello list,

I am looking for a way to test the computers on my network for weak
passwords. For instance, say I have the network (192.168.123.1-254)
for company "Tomcat" and I know most people either login as
"Administrator" (not the best I know but some battles are not worth
fighting) or the convention of LastName + First Initial. I just want
to be able to scan the network to make sure people aren't using the
company name or a simple derivation of the company name as their
password. Therefore, I just want to scan the user names on the network
against a small list of passwords like Tomcat, Tomcat1, TomCat,
TomCat1, tomcat, tomcat1 and so forth. If people are using the company
name as the password I can have them change it. That's all I want.

Is there a good (hopefully freeware but doesn't have to be) program
out there to help me accomplish this task?

Thanks,
John

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: