1. Anti-Hacker Tool Kit Password Cracking Brute-Force Tools Chapter 9
Vicky

2. Introduction
“Password” is the key

3. About the password
One-way hash
Brute-Force
Plain Text
WZYxAM$5IGD3yl

4. Where is the password ? Shadow Password Solaris DES from /etc/passwd
Mandrake DES from /etc/shadow
FreeBSD MD5 from /etc/shadow
OpenBSD Blowfish from /etc/master.passwd
Windows 2000 from \WINNT\repair\SAM
Encrypted Password

5. Start to Cracking John the Ripper Pwdump2 Pwdump3 L0phtCrack SMBGrind
Nbaudit

6. John the Ripper
Get the file
Uncompress
make

7. Benchmark

8. Start to cracking

9. Pwdump Grab a text version of the SAM Task Monitor Find out PID
Get the hashs
Grab a text version of the SAM
Usage

10. Pwdump3
Pwdump2+remote access
Usage

11. L0phtCrack
Pwdump + Brute-Force Cracking

12. Removing the LanMan Hash
Why…
LanMan 69^7
MD4 96^8
How to…
LaMan
MD4
LaMan
LaMan

13. Lasdump
Dump the password from memory
No cracking

14. SMBGrind

15. Nbaudit
SMBGrind+
Scan address range
Specify put file
Usage

16. Windows may be more security
Run secpol.msc

17. Summary: Strong password
好膽！賣走
long
a-z
numbers
A-Z