[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 21 Sep 2015 19:16:19 +0200
From: Patrick Proniewski <patpro@...pro.net>
To: john-users@...ts.openwall.com
Subject: Re: best setup to crack format nt or nt2
On 21 sept. 2015, at 15:03, Luis Rocha wrote:
> Another thing that might work well is to run the command "net accounts
> /domain" on a command line shell on a Windows corporate environment and see
> what is the current password policy for length. Than you can refine your
> cracking strategy. For example if the minimum password length is 8 you can
> use --min-length=8. Furthermore, the cracking attempts with a word list
> containing variations and acronyms of the company name also tends to work
> well. A quick win is also to try a wordlist like the rockyou.txt available
> on the web.
I'm using rockyou often. As of password policy, we have one, but outside of AD: users change their password somewhere else, and it's pushed into directories.
Our password policy becomes harsher every year, but we don't currently force people to renew their pwd... My main target is not compliant with our current policy :)
Patrick
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
