Penetration Testing mailing list archives

Re: Rainbow Tables


From: "Tony Stark" <stark192 () hotmail com>
Date: Thu, 09 Feb 2006 08:19:32 -0500


Thank you all for the great suggestions! I now have some great resourses from where I can pull the info I need.


Now, I've got a good one for you which may be a challange to come up with a solution.

I have now been tasked to take a list of passwords and try to generate a precomputed hash table out of those passwords...not sure if this can be done but of course I have to find a way..since I am "holding up a project".

Reason for this...the idea is that if we take the current list of passwords create a pre-computed hash table the next time we audit we'd run LC5 (till I convense them otehrwise) and all but the passwords that changed and new accounts would get knocked out right away.

Does anyone have a hint as to how I should do this? Is there a way to take the hashes and the cracked clear text and merge them into a table?

What is the best application foir creating pre-computed hash tables, that will work with LC5?

Thanks again for your help and the great suggestions!!

Tony

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/


------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------


Current thread: