SecTools

Checkpwd

Jalal Rohani — Wed, 29 Aug 2007 01:14:48 +0000

Checkpwd is a fast dictionary based password checker for Oracle databases. Checkpwd reads the password hashes from the table sys.user$ and compares the hashkeys with the hashkeys calculated from a dictionary file. Info: http://www.red-database-security.com/software/checkpwd.html

These icons link to social bookmarking sites where readers can share and discover new web pages.

Brutus

Jalal Rohani — Sat, 24 Jun 2006 09:19:19 +0000

Brutus : A network brute-force authentication cracker This Windows-only cracker bangs against network services of remote systems trying to guess passwords by using a dictionary and permutations thereof. It supports HTTP, POP3, FTP, SMB, TELNET, IMAP, NTP, and more. No source code is available. UNIX users should take a look at THC Hydra.

These icons link to social bookmarking sites where readers can share and discover new web pages.

RainbowCrack

Jalal Rohani — Fri, 23 Jun 2006 19:24:44 +0000

RainbowCrack : An Innovative Password Hash Cracker The RainbowCrack tool is a hash cracker that makes use of a large-scale time-memory trade-off. A traditional brute force cracker tries all possible plaintexts one by one, which can be time consuming for complex passwords. RainbowCrack uses a time-memory trade-off to do all the cracking-time computation in advance and store the results in so-called “rainbow tables”. It does take a long time to precompute the tables but RainbowCrack can be hundreds of times faster than a brute force cracker once the precomputation is finished.

These icons link to social bookmarking sites where readers can share and discover new web pages.

Pwdump

Jalal Rohani — Fri, 23 Jun 2006 19:22:20 +0000

Pwdump : A window password recovery tool
Pwdump is able to extract NTLM and LanMan hashes from a Windows target, regardless of whether Syskey is enabled. It is also capable of displaying password histories if they are available. It outputs the data in L0phtcrack-compatible form, and can write to an output file.

These icons link to social bookmarking sites where readers can share and discover new web pages.

SolarWinds

Jalal Rohani — Fri, 23 Jun 2006 19:22:08 +0000

SolarWinds : A plethora of network discovery/monitoring/attack tools
SolarWinds has created and sells dozens of special-purpose tools targeted at systems administrators. Security-related tools include many network discovery scanners, an SNMP brute-force cracker, router password decryption, a TCP connection reset program, one of the fastest and easiest router config download/upload applications available and more.

These icons link to social bookmarking sites where readers can share and discover new web pages.

Airsnort

Jalal Rohani — Fri, 23 Jun 2006 18:23:38 +0000

Airsnort : 802.11 WEP Encryption Cracking Tool AirSnort is a wireless LAN (WLAN) tool that recovers encryption keys. It was developed by the Shmoo Group and operates by passively monitoring transmissions, computing the encryption key when enough packets have been gathered. You may also be interested in the similar Aircrack.

These icons link to social bookmarking sites where readers can share and discover new web pages.

L0phtcrack

Jalal Rohani — Fri, 23 Jun 2006 18:13:17 +0000

L0phtcrack : Windows password auditing and recovery application L0phtCrack, also known as LC5, attempts to crack Windows passwords from hashes which it can obtain (given proper access) from stand-alone Windows NT/2000 workstations, networked servers, primary domain controllers, or Active Directory. In some cases it can sniff the hashes off the wire. It also has numerous methods of generating password guesses (dictionary, brute force, etc). LC5 was discontinued by Symantec in 2006, but you can still find the LC5 installer floating around. The free trial only lasts 15 days, and Symantec won’t sell you a key, so you’ll either have to cease using it or find a key generator. Since it is no longer maintained, you are probably better off trying Cain and Abel or John the Ripper instead.

These icons link to social bookmarking sites where readers can share and discover new web pages.

Aircrack

Jalal Rohani — Fri, 23 Jun 2006 16:31:22 +0000

Aircrack : The fastest available WEP/WPA cracking tool Aircrack is a suite of tools for 802.11a/b/g WEP and WPA cracking. It can recover a 40 through 512-bit WEP key once enough encrypted packets have been gathered. It can also attack WPA 1 or 2 networks using advanced cryptographic methods or by brute force. The suite includes airodump (an 802.11 packet capture program), aireplay (an 802.11 packet injection program), aircrack (static WEP and WPA-PSK cracking), and airdecap (decrypts WEP/WPA capture files).

These icons link to social bookmarking sites where readers can share and discover new web pages.

THC Hydra

Jalal Rohani — Fri, 23 Jun 2006 15:53:22 +0000

THC Hydra : A Fast network authentication cracker which support many different services When you need to brute force crack a remote authentication service, Hydra is often the tool of choice. It can perform rapid dictionary attacks against more then 30 protocols, including telnet, ftp, http, https, smb, several databases, and much more. Like THC Amap this release is from the fine folks at THC.

These icons link to social bookmarking sites where readers can share and discover new web pages.

John the Ripper

Jalal Rohani — Fri, 23 Jun 2006 14:40:49 +0000

John the Ripper : A powerful, flexible, and fast multi-platform password hash cracker John the Ripper is a fast password cracker, currently available for many flavors of Unix (11 are officially supported, not counting different architectures), DOS, Win32, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. It supports several crypt(3) password hash types which are most commonly found on various Unix flavors, as well as Kerberos AFS and Windows NT/2000/XP LM hashes. Several other hash types are added with contributed patches. You will want to start with some wordlists, which you can find here, here, or here.

These icons link to social bookmarking sites where readers can share and discover new web pages.