Re: kerbcrack and kerbsniff
From: x y (levinson_k@excite.com)
Date: 01/16/03
- Next message: Dane Warner: "Mapping a drive letter without logging in as user"
- Previous message: x y: "Re: Securing Outbound access to the Internet"
- In reply to: William Crites: "Re: kerbcrack and kerbsniff"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "x y" <levinson_k@excite.com> Date: Thu, 16 Jan 2003 13:10:49 -0500
Also, try a www.google.com search for those file names for more info.
Note that switches do NOT defeat sniffing like this.
"William Crites" <wcrites@cis.ctc.edu> wrote in message
news:3E25DF15.604C5820@cis.ctc.edu...
> Well, it will sniff the kerbero activities on the network. In my case, it
didn't
> monitor because my network device is switch. It can be work if you put the
tool
> on DC or add hub to your workstation and use your tool to sniff the
kerberos and
> grab data related to kerberos.
>
> When you grab the data then you have to use kerbcrack and run it for days
to
> crack. You can protect your AD when you have a long password and change
the
> password every short period like 10 days. Please make sure it contains
> character, number, and special character. You can use group policy to
enforce
> the password input string to strong password.
>
> Kerbcrack isn't fast if you use mixed dictonary (character, number,
special
> character). The shorter password the sooner you crack. I ran the tool on
800
> mhz and it takes days to reach 7 digits.
>
> It depends on what kind of security you want to enforce and don't want. It
> depends on many factors like network, firewall, block users to access
those
> tools, use software monitoring to detect, put AD behind the firewall, etc.
Lots
> of choices.
>
> William
>
> Famille Alfaro Emery wrote:
>
> > hi
> >
> > I fonded one user on my network downlaoding and I suppose it could do a
lots
> > of things with it. How is it working ? could I protect my AD from it
> >
> > thanks for your helps and advice
> >
> > philip
>
- Next message: Dane Warner: "Mapping a drive letter without logging in as user"
- Previous message: x y: "Re: Securing Outbound access to the Internet"
- In reply to: William Crites: "Re: kerbcrack and kerbsniff"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
