Re: Rainbow Tables

I understand that you have an assignment and so you are compelled to do
that. But, wouldn't it be easier to create a diccionary with the passwords
in clar text?. In fact I believe LC5 can create a diccionary with the
result of a session.

Regards





"Tony Stark" <stark192@xxxxxxxxxxx>

09/02/2006 14:19


Para: pen-test@xxxxxxxxxxxxxxxxx
cc: (cco: Juan Alvarez Ferrando/Auditoria Informatica/EXTERNOS CAJASTUR)
Asunto: Re: Rainbow Tables



Thank you all for the great suggestions! I now have some great resourses
from where I can pull the info I need.


Now, I've got a good one for you which may be a challange to come up with
a
solution.

I have now been tasked to take a list of passwords and try to generate a
precomputed hash table out of those passwords...not sure if this can be
done
but of course I have to find a way..since I am "holding up a project".

Reason for this...the idea is that if we take the current list of
passwords
create a pre-computed hash table the next time we audit we'd run LC5 (till
I
convense them otehrwise) and all but the passwords that changed and new
accounts would get knocked out right away.

Does anyone have a hint as to how I should do this? Is there a way to take

the hashes and the cracked clear text and merge them into a table?

What is the best application foir creating pre-computed hash tables, that
will work with LC5?

Thanks again for your help and the great suggestions!!

Tony

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE!

http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/


------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:

Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,

login pages, dynamic content etc. Firewalls, SSL and locked-down servers
are
futile against web application hacking. Check your website for
vulnerabilities
to SQL injection, Cross site scripting and other web attacks before
hackers do!
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------





------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:

Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers do!
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------

Relevant Pages

  • RE: 3rd party vuln assesment firms
    ... > "We use the same tools hackers bring to bear against your systems. ... >> I'm looking for a firm to conduct annual 3rd party vulnerability ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
    (Pen-Test)
  • RE: Whitespace in passwords - now alt+xxx
    ... Subject: Whitespace in passwords ... 60 possible characters and the password is 7 characters long. ... >> Check your website for vulnerabilities to SQL injection, ... >> scripting and other web attacks before hackers do! ...
    (Pen-Test)
  • RE: 3rd party vuln assesment firms
    ... > "We use the same tools hackers bring to bear against your systems. ... >> I'm looking for a firm to conduct annual 3rd party vulnerability ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
    (Pen-Test)
  • RE: Penetration test of 1 IP address
    ... Before I do anything very intrusive I personally go to the website ... Also remember once you have found a vulnerability, ... Hackers are concentrating their efforts on attacking applications on ... Up to 75% of cyber attacks are launched on shopping ...
    (Pen-Test)
  • Re: Whitespace in passwords
    ... input password is alphanumeric + special characters -- chances are strong ... >> Hackers are concentrating their efforts on attacking applications on ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
    (Pen-Test)