Re: Highlighting weak password dangers

El Miércoles, 24 de Enero de 2007 18:15, WALI escribió:
I want to highlight the danger of using weak passwords on servers and users
admin desktops. I have tested TSgrinder with a basic dictionary Brute Force
to access Remote Desktop exploit on both servers and desktops. The problem
here is that when connected to domain, the Account Lockout feature disables
the account quite soon. I can only show the exploit on machines not
connected to the domain where Domain Security policy doesn't flow down.

What are other interesting and intriguing ways to present this problem? I
also need a system to do Passwords Audit on my domain and make then 'secure
password' policy compliance.

Try Babel Enterprise, it runs on Linux, Windows (XP, 2003 Server, 2000) and
most Unix (HP-UX, AIX...)

http://babel.sourceforge.net/en/index.php

Hope this helps.
--
Manuel Arostegui Ramirez.

Electronic Mail is not secure, may not be read every day, and should not
be used for urgent or sensitive issues.

Relevant Pages

  • Re: Visa File/Print Sharing Requires Username - Dont Want That
    ... Well, I understand that's one way, and the most secure, but I have 3 other ... desktops and 4 other laptops in the house that may use the printer and access ...
    (microsoft.public.windows.vista.networking_sharing)
  • Re: How to hack my own server - ideas ?
    ... issues with my desktops than I do my server. ... Don't hack your server, have a talk with your employees. ... > to test to see if it's secure & how secure, ... > Gary Horne ...
    (microsoft.public.windows.server.sbs)