http://www.secuobs.com L'observatoire de la securite Internet fr webmaster@secuobs.com Laverna's Brute 1.1 Released an open source cryptographic auditor, which supports brute forcing NTLM hashes. http://www.secuobs.com/revue/news/197825.shtml http://www.secuobs.com/news/comments431122005-captive.shtml#5271 http://www.secuobs.com/news/comments431122005-captive.shtml#5271 UPDATE John the Ripper 1.7.5 http://www.secuobs.com/revue/news/195828.shtml http://www.secuobs.com/news/comments431122005-captive.shtml#5213 http://www.secuobs.com/news/comments431122005-captive.shtml#5213 Medusa 2.0 Released, a speedy, massively parallel, modular, login brute-forcer http://www.secuobs.com/revue/news/192987.shtml http://www.secuobs.com/news/comments331122005-captive.shtml#5102 http://www.secuobs.com/news/comments331122005-captive.shtml#5102 Video : Tracing Unauthorized Login Attempts in Windows XP http://www.secuobs.com/revue/news/191778.shtml http://www.secuobs.com/news/comments331122005-captive.shtml#5057 http://www.secuobs.com/news/comments331122005-captive.shtml#5057 ncrack-0.01ALPHA.tar.gz a high-speed network authentication cracking tool http://www.secuobs.com/revue/news/184691.shtml http://www.secuobs.com/news/comments331122005-captive.shtml#4642 http://www.secuobs.com/news/comments331122005-captive.shtml#4642 john-1.7.4.2.tar.gz http://www.secuobs.com/revue/news/183453.shtml http://www.secuobs.com/news/comments331122005-captive.shtml#4593 http://www.secuobs.com/news/comments331122005-captive.shtml#4593 CeWL 3 - Custom Word List generator - JS redirect checking and a bug fix for an issue in the ruby spider gem http://www.secuobs.com/revue/news/182709.shtml http://www.secuobs.com/news/comments331122005-captive.shtml#4546 http://www.secuobs.com/news/comments331122005-captive.shtml#4546 John the Ripper 1.7.4 http://www.secuobs.com/revue/news/176680.shtml http://www.secuobs.com/news/comments331122005-captive.shtml#4292 http://www.secuobs.com/news/comments331122005-captive.shtml#4292 CeWL v2.2 Custom Word List generator - released http://www.secuobs.com/revue/news/153797.shtml http://www.secuobs.com/news/comments331122005-captive.shtml#3465 http://www.secuobs.com/news/comments331122005-captive.shtml#3465 Video : DistCrypt distributed password cracking using a java applet injected into an iframe (via Xmco Partners) http://www.youtube.com/watch?v=IdZT3QJVeSofmt=18 http://www.secuobs.com/news/comments331122005-captive.shtml#3460 http://www.secuobs.com/news/comments331122005-captive.shtml#3460 mapdav-1.0p5.tar.gz http://www.secuobs.com/revue/news/146715.shtml http://www.secuobs.com/news/comments331122005-captive.shtml#3236 http://www.secuobs.com/news/comments331122005-captive.shtml#3236 Bruter A Parallel Network Login Brute-Forcer http://www.secuobs.com/revue/news/146156.shtml http://www.secuobs.com/news/comments331122005-captive.shtml#3221 http://www.secuobs.com/news/comments331122005-captive.shtml#3221 Vidéo : Telnet Bruteforcing with XHydra and BackTrack-4 http://www.secuobs.com/videos/news/7962.shtml http://www.secuobs.com/news/comments331122005-captive.shtml#3130 http://www.secuobs.com/news/comments331122005-captive.shtml#3130 Vidéo : Dissecting the hack, the f0rb1dd3n network http://www.secuobs.com/videos/news/8655.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#3126 http://www.secuobs.com/news/comments231122005-captive.shtml#3126 John the Ripper 1.7.3.4 released http://www.secuobs.com/revue/news/142941.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#3088 http://www.secuobs.com/news/comments231122005-captive.shtml#3088 Mobius Forensic Toolkit 0.4.8 http://www.secuobs.com/revue/news/142999.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#3087 http://www.secuobs.com/news/comments231122005-captive.shtml#3087 Vidéo : Phishing Attack using the Social Engineering Toolkit http://www.secuobs.com/revue/news/142548.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#3070 http://www.secuobs.com/news/comments231122005-captive.shtml#3070 ESRT @ffxp @humanhacker Social Engineering Framework http://www.secuobs.com/twitter/news/23622.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#3045 http://www.secuobs.com/news/comments231122005-captive.shtml#3045 Password Auditing with Fgdump, John the Ripper PowerShell http://www.secuobs.com/revue/news/140496.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#3041 http://www.secuobs.com/news/comments231122005-captive.shtml#3041 New version of WiKID authentication server communauty edition http://www.secuobs.com/revue/news/135130.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#2928 http://www.secuobs.com/news/comments231122005-captive.shtml#2928 Hackers Using Trojans to Steal One-Time Passwords http://www.secuobs.com/revue/news/132987.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#2831 http://www.secuobs.com/news/comments231122005-captive.shtml#2831 RevDump v0.2 to dump password stored using reversible encryption http://www.secuobs.com/revue/news/131218.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#2762 http://www.secuobs.com/news/comments231122005-captive.shtml#2762 Vidéo : Salty Hashes Hak5 http://www.secuobs.com/videos/news/7317.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#2611 http://www.secuobs.com/news/comments231122005-captive.shtml#2611 NullSearchAccess 1.2 default logins scanner for ftp, pop3, imap, mysql, and more http://www.secuobs.com/revue/news/122112.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#2413 http://www.secuobs.com/news/comments231122005-captive.shtml#2413 ESRT @IBMFedCyber software to mask confidential information online http://www.secuobs.com/twitter/news/8921.shtml http://www.secuobs.com/news/comments131122005-captive.shtml#2362 http://www.secuobs.com/news/comments131122005-captive.shtml#2362 Vidéo : Kon-Boot pownage of BackTrack 4 Beta http://www.secuobs.com/videos/news/7139.shtml http://www.secuobs.com/news/comments131122005-captive.shtml#2320 http://www.secuobs.com/news/comments131122005-captive.shtml#2320 Masked Passwords Debate Redux http://www.secuobs.com/revue/news/118976.shtml http://www.secuobs.com/news/comments131122005-captive.shtml#2305 http://www.secuobs.com/news/comments131122005-captive.shtml#2305 Kon-Boot from USB to Bypass Windows and Linux login passwords http://www.secuobs.com/revue/news/117941.shtml http://www.secuobs.com/news/comments131122005-captive.shtml#2279 http://www.secuobs.com/news/comments131122005-captive.shtml#2279 ESRT @smaret Tutoriel authentification forte OpenID et certificat numérique http://www.secuobs.com/twitter/news/6782.shtml http://www.secuobs.com/news/comments131122005-captive.shtml#2236 http://www.secuobs.com/news/comments131122005-captive.shtml#2236 Vidéo : Dictionary Attack on a Wireless Router using Hydra http://www.secuobs.com/revue/news/115382.shtml http://www.secuobs.com/news/comments131122005-captive.shtml#2161 http://www.secuobs.com/news/comments131122005-captive.shtml#2161 MAPDAV 1.0p3 More Accurate Password Dictionary Attack Vector http://www.secuobs.com/revue/news/114272.shtml http://www.secuobs.com/news/comments131122005-captive.shtml#2118 http://www.secuobs.com/news/comments131122005-captive.shtml#2118 WiKID a Commercial Open Source Two-Factor Authentication tool http://www.secuobs.com/revue/news/111387.shtml http://www.secuobs.com/news/comments131122005-captive.shtml#1994 http://www.secuobs.com/news/comments131122005-captive.shtml#1994 ESRT @devilok - Ophcrack 330 and ophcrack LiveCD 230 released http://www.secuobs.com/twitter/news/2630.shtml http://www.secuobs.com/news/comments131122005-captive.shtml#1880 http://www.secuobs.com/news/comments131122005-captive.shtml#1880 Kon-Boot post (minor) update http://www.secuobs.com/revue/news/103626.shtml http://www.secuobs.com/news/comments131122005-captive.shtml#1725 http://www.secuobs.com/news/comments131122005-captive.shtml#1725 Tutoriel Kon-boot, contourner le mot de passe sous XP, Vista et Linux http://www.crack-wpa.fr/tutoriel-kon-boot-acces-root-admin-xp-vista-linux.php http://www.secuobs.com/news/comments131122005-captive.shtml#1319 http://www.secuobs.com/news/comments131122005-captive.shtml#1319 Video : Using Backtrack to 0wn Windows Vista http://www.secuobs.com/revue/news/91157.shtml http://www.secuobs.com/news/comments31122005-captive.shtml#1303 http://www.secuobs.com/news/comments31122005-captive.shtml#1303 Remote-Exploit : CUPP Tool - Common User Passwords Profiler http://www.remote-exploit.org/codes_cupp.html http://www.secuobs.com/news/comments31122005-captive.shtml#1266 http://www.secuobs.com/news/comments31122005-captive.shtml#1266 KON-BOOT for Windows and Linux (Password Bypassing Utility for Forgetting Heads) http://www.secuobs.com/secumail/fdsecumail/msg23821.shtml http://www.secuobs.com/news/comments31122005-captive.shtml#1091 http://www.secuobs.com/news/comments31122005-captive.shtml#1091 Internet users still using same password for all Web sites http://www.secuobs.com/revue/news/70230.shtml http://www.secuobs.com/news/comments31122005-captive.shtml#724 http://www.secuobs.com/news/comments31122005-captive.shtml#724 The Associative Word List Generator (AWLG) - Create Related Wordlists for Password Cracking http://www.secuobs.com/revue/news/51211.shtml http://www.secuobs.com/news/comments31122005-captive.shtml#450 http://www.secuobs.com/news/comments31122005-captive.shtml#450 en l'état ça ne semble pas possible de récupérer la base SAM locale à part en exploitant une vulnérabilité du système ou d'une application tierce pour récupérer des fichiers à distance dont la base SAM mais si tu as de tels droits tu n'as surement plus besoin de faire quoi que ce soit avec cette base ailleurs ... http://www.secuobs.com/news/comments31122005-captive.shtml#285 http://www.secuobs.com/news/comments31122005-captive.shtml#285 mais avec quelle logiciel va tu capturer la sam d'un windows. Sachant que le PC qui fait sa est sous linux. ouslie@hotmail.fr http://www.secuobs.com/news/comments31122005-captive.shtml#284 http://www.secuobs.com/news/comments31122005-captive.shtml#284 Si la question est "est-ce que je peux prendre la base SAM sur une machine windows et la déplacer vers une machine linux pour la traiter puir la ramener sur la machine windows et m'authentifier avec les nouveaux credentials ?", la réponse est oui sans aucun souçis ... http://www.secuobs.com/news/comments31122005-captive.shtml#283 http://www.secuobs.com/news/comments31122005-captive.shtml#283 Salut je voulais savoir si on peut faire sa en réseau local, avec un pc sous linux qui recupérait la SAM d'un pc windows ouslie@hotmail.fr http://www.secuobs.com/news/comments31122005-captive.shtml#282 http://www.secuobs.com/news/comments31122005-captive.shtml#282 qursquo;est ce qui t en empeche \? http://www.secuobs.com/news/comments31122005-captive.shtml#42 http://www.secuobs.com/news/comments31122005-captive.shtml#42 je veux vraiment changer mon mot de passe\ http://www.secuobs.com/news/comments31122005-captive.shtml#41 http://www.secuobs.com/news/comments31122005-captive.shtml#41