Dmitri at 20:34, 4 November 2013

2013-11-04T20:34:17Z

Dmitri: 1 revision

2013-08-06T17:18:20Z

1 revision

DavidM: 1 revision

2013-02-07T21:26:04Z

1 revision

New page

{{Section
|Title=Password Cracking
|Type=Lesson
|Position=2/1
|Section of=Password management
|Lang=En
|Goal=
|Dependencies=
|Technical requirements=
|Minimum time=10
|Maximum time=20
|Difficulty=
|Lesson type=Demonstration
|Minimum time=10
|Maximum time=20
|Optionality=Required
}}
=== Introduction ===
A password is usually the first and often the last line of defense for information systems. Participants need to be convinced during this lesson that it is not reasonable or secure to have a weak password protecting important information nor is it a good idea to have one strong password protecting all the user's different accounts.

=== Password Insecurity ===
Discuss password profiling, social engineering attacks and installation of keyloggers, via email or drive-by downloaders.

Demonstrate how a password cracker works. Demonstrate Windows password crackers, like [http://ophcrack.sourceforge.net/ Ophcrack]; [http://www.elcomsoft.com/aopr.html Advanced Office Password Recovery] and the [http://storm.net.nz/projects/16 winlockpwn] attack over a firewire cable.

Install [http://www.oxid.it/cain.html Cain] on a local machine and demonstrate the withdrawal of its local passwords.

Ask one of the participants to prepare a Word document with an easy password, and crack it using [http://www.elcomsoft.com/aopr.html Advanced Office Password Recovery] for example.

=== Goal ===
Explain the principles of brute force and the need for password complexity.

=== Trainer's notes ===
You'll need to prepare in advance for password cracking and make sure you've tested your software. You'll need [http://ophcrack.sourceforge.net/tables.php Rainbow Table] for opchrack. The trial version of AOPR can only crack 4 character passwords.

← Older revision		Revision as of 20:34, 4 November 2013
Line 27:		Line 27:

	Ask one of the participants to prepare a Word document with an easy password, and crack it using [http://www.elcomsoft.com/aopr.html Advanced Office Password Recovery] for example.		Ask one of the participants to prepare a Word document with an easy password, and crack it using [http://www.elcomsoft.com/aopr.html Advanced Office Password Recovery] for example.
		+
		+	Ask the participants to test out their favourite password's security from http://www.cryptool-online.org/index.php?option=com_cto&view=tool&Itemid=159&lang=en

	=== Goal ===		=== Goal ===

← Older revision	Revision as of 17:18, 6 August 2013
(No difference)

Password management/Password Cracking - Revision history

Dmitri at 20:34, 4 November 2013

Dmitri: 1 revision

DavidM: 1 revision