RE: Password Audit tools

From: Cotter, Joe (jcotter_at_everestusa.com)
Date: 12/15/04

  • Next message: IndianZ: "Re: pwdump 2 & 3" 
    Date: Wed, 15 Dec 2004 12:38:04 -0600
To: "Jeffrey M.Miller CISSP" <jmiller@acumeninfosec.com>, <pen-test@securityfocus.com>

    You can also try Retina from eEye. It's more of an all-around tool, but it does a pretty good job with basic password audits as well. I've used Retina (can't afford anything more than a temp license) with a LOT of success. For a windows-based tool it's pretty good.
     
    -Joe

    ________________________________

    From: Jeffrey M.Miller CISSP [mailto:jmiller@acumeninfosec.com]
    Sent: Mon 12/13/2004 7:10 PM
    To: pen-test@securityfocus.com
    Subject: Password Audit tools

    I've used Internet Security Scanner from ISS and really like it's
    ability to pull users from NT domains and test common passwords, such
    as username=password, password=password, etc.

    I've considered purchasing the consultant version of l0phtcrack LC5.

    Has anyone used LC5 and can anyone compare it to ISS? Also are there
    any OpenSource tools that can do these sorts of checks?

    Thanks

    J_

  • Next message: IndianZ: "Re: pwdump 2 & 3"