Re: Craking Serv-u passwords stored in .ini file.

From: Hans Porter (infosecprofessional_at_gmail.com)
Date: 09/02/04

  • Next message: Iván Arce: "Re: Test scripts for NIDS"
    Date: Thu, 2 Sep 2004 16:44:23 -0400
    To: "\"Jérôme\" ATHIAS" <jerome.athias@caramail.com>
    
    

    Actually, the http://passcracking.com site will crack MD5 hashes using
    rainbow tables, but they are non-salted, as salted MD5 is too
    difficult for precomputation attacks (for now). The Sarca project
    (sarcaprj.wayreth.eu.org) does LanMan and NT via rainbow tables.

       --- Hans

    On 1 Sep 2004 19:10:41 -0000, "Jérôme" ATHIAS
    <jerome.athias@caramail.com> wrote:
    > In-Reply-To: <1FFD627BFDAEE0468AA006E0AD632470E47878@uncl-mail.caa.army.mil>
    >
    > >i believe that is an md5 hash. there is a free service for cracking md5 =
    >
    > >hashes that uses tables at http://passcracking.com
    >
    > >
    >
    > >peas audi
    >
    > >
    >
    > >~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    >
    > I believe this url will only crack LM hashes of Windows passwords up to 14 characters using Rainbow Tables...
    >
    > I think it's quite different from MD5...
    >
    > PS: you maybe could look at http://wired.s6n.com/files/jathias/
    >
    >
    >
    > ------------------------------------------------------------------------------
    > Ethical Hacking at the InfoSec Institute. All of our class sizes are
    > guaranteed to be 12 students or less to facilitate one-on-one interaction
    > with one of our expert instructors. Check out our Advanced Hacking course,
    > learn to write exploits and attack security infrastructure. Attend a course
    > taught by an expert instructor with years of in-the-field pen testing
    > experience in our state of the art hacking lab. Master the skills of an
    > Ethical Hacker to better assess the security of your organization.
    >
    > http://www.infosecinstitute.com/courses/ethical_hacking_training.html
    > -------------------------------------------------------------------------------
    >
    >

    ------------------------------------------------------------------------------
    Ethical Hacking at the InfoSec Institute. All of our class sizes are
    guaranteed to be 12 students or less to facilitate one-on-one interaction
    with one of our expert instructors. Check out our Advanced Hacking course,
    learn to write exploits and attack security infrastructure. Attend a course
    taught by an expert instructor with years of in-the-field pen testing
    experience in our state of the art hacking lab. Master the skills of an
    Ethical Hacker to better assess the security of your organization.

    http://www.infosecinstitute.com/courses/ethical_hacking_training.html
    -------------------------------------------------------------------------------


  • Next message: Iván Arce: "Re: Test scripts for NIDS"

    Relevant Pages

    • Re: Rogue activity methodology (was: Tool to find hidden web proxyserver)
      ... Subject: Rogue activity methodology (was: Tool to find hidden web ... Ethical Hacking at the InfoSec Institute. ... Check out our Advanced Hacking course, ... learn to write exploits and attack security infrastructure. ...
      (Pen-Test)
    • RE: Wireless Scanning
      ... Objet: RE: Wireless Scanning ... > Ethical Hacking at the InfoSec Institute. ... > Check out our Advanced Hacking course, ... learn to write exploits and attack security infrastructure. ...
      (Pen-Test)
    • RE: snmp
      ... You should give ADMsnmp a try. ... Ethical Hacking at the InfoSec Institute. ... Check out our Advanced Hacking course, ... learn to write exploits and attack security infrastructure. ...
      (Pen-Test)
    • RE: Achilles proxy for linux
      ... I believe you should try Burp Proxy or Snark ... Ethical Hacking at the InfoSec Institute. ... Check out our Advanced Hacking course, ... learn to write exploits and attack security infrastructure. ...
      (Pen-Test)
    • RE: Tool to find hidden web proxy server
      ... >> Ethical Hacking at the InfoSec Institute. ... Check out our Advanced Hacking course, ... >> learn to write exploits and attack security infrastructure. ...
      (Pen-Test)

  • Quantcast