[TOOL] ID Password Recovery (IPR)

From: support@securiteam.com
Date: 12/13/01


From: support@securiteam.com
To: list@securiteam.com
Date: Thu, 13 Dec 2001 23:06:46 +0100 (CET)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

When was the last time you checked your server's security?
How about a monthly report?
http://www.AutomatedScanning.com - Know that you're safe.
- - - - - - - - -

  ID Password Recovery (IPR)
------------------------------------------------------------------------

DETAILS

IPR is a tool for recovering passwords on Lotus Notes ID files. It does
this by guessing passwords you supply in a dictionary file. It guesses
approximately 400-500 passwords a second on a PIII 1 GHz. The tool should
be used by administrators for finding weak passwords in user id files.

ADDITIONAL INFORMATION

The tool can be downloaded from:
 <http://www.cqure.net/tools04.html> http://www.cqure.net/tools04.html

The information has been provided by <mailto:jonas.landin@ixsecurity.com>
Jonas Landin.

========================================

This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com

====================
====================

DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.



Relevant Pages

  • RE: Strange scan on 1433
    ... >They're looking for MS-SQL servers with blank/default sa passwords that are ... >missing the MS02-020 patch: ... Others have mentioned the MS02-020 bulletin... ...
    (Incidents)
  • Re: Where is MS03-031 article 818806
    ... The bulletin makes like it should explain more than just weak SA passwords. ... > Oh I see it now, a reference to the SA account change... ... >> Chris Wood ...
    (microsoft.public.sqlserver.security)
  • [NT] Cain & Abel PSK Sniffer Heap overflow
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... of passwords by sniffing the network, ... The information in this bulletin is provided "AS IS" without warranty of any kind. ... In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages. ...
    (Securiteam)
  • [NEWS] Default Password List (Default passwords sometimes stay for good)
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Many of today's software and hardware come with default passwords. ... The information in this bulletin is provided "AS IS" without warranty of any kind. ... In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages. ...
    (Securiteam)
  • [TOOL] THC-Hydra, a Parallel Login Hacker
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Number one of the biggest security holes are passwords, ... The information in this bulletin is provided "AS IS" without warranty of any kind. ... In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages. ...
    (Securiteam)