Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 21 Sep 2015 19:16:19 +0200
From: Patrick Proniewski <>
Subject: Re: best setup to crack format nt or nt2

On 21 sept. 2015, at 15:03, Luis Rocha wrote:

> Another thing that might work well is to run the command "net accounts
> /domain" on a command line shell on a Windows corporate environment and see
> what is the current password policy for length.  Than you can refine your
> cracking strategy. For example if the minimum password length is 8 you can
> use --min-length=8.  Furthermore, the cracking attempts with a word list
> containing variations and acronyms of the company name also tends to work
> well.  A quick win is also to try a wordlist like the rockyou.txt available
> on the web.

I'm using rockyou often. As of password policy, we have one, but outside of AD: users change their password somewhere else, and it's pushed into directories.
Our password policy becomes harsher every year, but we don't currently force people to renew their pwd... My main target is not compliant with our current policy :)


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.