Penetration Testing mailing list archives

Re: Password Crackers


From: Peter Wood <peterw () firstbase co uk>
Date: Wed, 15 Feb 2006 11:56:28 +0000

We use the following:

lmcrack
Ophcrack
Cain & Abel with Rainbow tables
SAMinside

regards
Pete

At 13:12 14/02/2006 -0500, xelerated wrote:
>List,
>As some of you may know, @stake has been bought by
>symantec. And if that wasnt bad enough, they are no longer
>selling LC5 after the end of this month.
>And they have no plans on a replacement product.
>
>In my experience, LC5 was about the best thing for speedy
>assessment of the password policy. Sure LC5 will still have
>some use for awhile to come, but then what?
>
>I know there are lots of other options, LCP, john, rainbow tables,
>and more, but as far as I know, nothing is near as speedy
>as LC.
>
>What are your thoughts? Is there something out there as fast or close?
>
>I had enough trouble getting an old junk PC for doing nessus scans on,
>so i know
>a cluster is out of the question.
>
>Thanks!
>Chris

--------------------------------------------------------------------
Peter Wood FBCS CITP MIEEE MIMIS CISSP
Chief of Operations
First Base Technologies
Office: +44 (0)1273 454525
Mobile: +44 (0)7774 239915
www.fbtechies.co.uk
www.white-hats.co.uk


------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------


Current thread: