Re: RFC on Ncrack, A new network authentication cracker

[jah <jah () zadkiel plus com>]

There's no question, it would be a useful tool.

Really like the idea of generating user:pass lists with Ncrack - it
would be fantastic if Ncrack could crawl a target website or other
content service and scrape useful looking words for its list.  Ncrack
should definitely ship with a quality list (and if someone decided to
spend the summer "Cracking the Internet" the list could have frequency
data (like nmap-services) too).

I agree with Luis too, Ncrack should be able to --resume from an
interrupted session.

Being able to add protocols with some kind of plugin architecture is
also a good idea and might encourage people to add a diverse set of
protocols to the mix.

I reckon Ncrack would be a worthwhile venture.  Hack 'em Ncrack 'em

jah


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org