Re: Password Brute Forcer

From: Ryan Russell (ryan@securityfocus.com)
Date: 12/10/01


Date: Mon, 10 Dec 2001 14:04:09 -0700 (MST)
From: Ryan Russell <ryan@securityfocus.com>
To: Ian Lyte <ILyte@richmondevents.com>

On Fri, 7 Dec 2001, Ian Lyte wrote:

> What I was wondering was is there a password cracker that substitutes
> numbers for letters?

Sure, crack has done this for a long time:
http://www.users.dircon.co.uk/~crypto/

>
> As an example, we all know people do tend to use words as a password,
> occasionally improving their strength with the use of numbers i.e.
> password99. I also think that a lot of people may use p4ssw0rd.

If you really want to do this with L0phtcrack, then it would be pretty
easy to write a program that would take a dictionary file, and output a
new (larger) dictionary with the number substitutions done.

                                                Ryan

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/



Relevant Pages

  • Re: faster scans? (nmap)
    ... one host using nmap for syn scans in burst mode with the ... >>>This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: pen test help please asap
    ... > Machine A on client site makes a configurable encrypted OUTBOUND ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • Re: ettercap help
    ... Anyways have never tried Ettercap for VNC. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ... This list is provided by the SecurityFocus Security Intelligence Alert ...
    (Pen-Test)
  • RE: CFM SQL injection
    ... You should better use union or alike get unauthorized data from the ... This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)
  • Re: ettercap help
    ... > I can get it to sniff telnet, ftp, pop, smb, but no vnc. ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
    (Pen-Test)