Crack / L0phtCrack

• Software that attempts to guess passwords for an account for Unix and NT (directory entries, brute force, User Id variations)

• Requires /etc/passwd (can be stolen using “phf” in cgi-bin) and somebodyelses account

• attacker runs Crack against the stolen ‘passwd’ file on his own computer

• Crack functionality: guess password, encrypt, check if match, try again

• Crack v 5.0 for Unix released in 1996

• L0phtcrack ver 2.5.2 for Windows NT updated December 1998

  • dictionary and brute force password cracking

Previous slide

Next slide

Back to first slide

View graphic version