New Free Service Cracks Weak Passwords

[InfoSec News <alerts () infosecnews org>]

http://www.darkreading.com/management/new-free-service-cracks-weak-passwords/240159192

By Kelly Jackson Higgins
Dark Reading
July 31, 2013

Praetorian this week launched a free, cloud-based password auditing 
service that ferrets out weak passwords and hashes.

The new PWAudit.com is based on Amazon AWS; it automatically detects hash 
types and includes a wordlist generator and reporting features. 
Password-cracking tools aren't new, but the service is aimed at making the 
process more user-friendly and scalable, according to Praetorian.

"With the number of breaches increased, especially with passwords, 
companies are more aware of the risks. This tool helps them demonstrate or 
make the case internally and do their own type of audit prior to a 
penetration test or before a breach happens," says Josh Abraham, director 
of services at Praetorian.

Password creation and management has become a major headache to 
organizations as users and administrators struggle to manage multiple 
passwords, and users not surprisingly prefer easy-to-recall (read: weak) 
passwords. "It's frustrating. But at the end of the day, organizations 
need to understand the risks in the way they handle passwords," Abraham 
says.

[...]



--
Find the best InfoSec talent without breaking your budget!
Post a Job! $99 for 31 days
http://www.hotinfosecjobs.com/