http://www.secuobs.com L'observatoire de la securite Internet fr webmaster@secuobs.com ESRT @ChrisJohnRiley @hackerschoice - Hydra v7.1 is available Now supports socks, new proxy url enum module, bug fixes http://www.secuobs.com/twitter/news/253643.shtml http://www.secuobs.com/news/comments731122005-captive.shtml#11070 http://www.secuobs.com/news/comments731122005-captive.shtml#11070 UPDATE THC-HYDRA v7.0 http://www.secuobs.com/revue/news/328879.shtml http://www.secuobs.com/news/comments731122005-captive.shtml#10860 http://www.secuobs.com/news/comments731122005-captive.shtml#10860 ESRT @techflavor @digininja - new version of CeWL, this runs with Ruby 1.9 and has instructions for use in BT5 http://www.secuobs.com/twitter/news/235433.shtml http://www.secuobs.com/news/comments731122005-captive.shtml#10402 http://www.secuobs.com/news/comments731122005-captive.shtml#10402 Cracking Passwd Hashes with Perl http://www.secuobs.com/revue/news/317407.shtml http://www.secuobs.com/news/comments731122005-captive.shtml#10176 http://www.secuobs.com/news/comments731122005-captive.shtml#10176 UPDATE THC-HYDRA v6.5 http://www.secuobs.com/revue/news/317171.shtml http://www.secuobs.com/news/comments731122005-captive.shtml#10166 http://www.secuobs.com/news/comments731122005-captive.shtml#10166 ESRT @stalkr_ @aramosf - John the Ripper GPU patches http://www.secuobs.com/twitter/news/221660.shtml http://www.secuobs.com/news/comments731122005-captive.shtml#9958 http://www.secuobs.com/news/comments731122005-captive.shtml#9958 UPDATE THC-HYDRA v6.4 http://www.secuobs.com/revue/news/311890.shtml http://www.secuobs.com/news/comments731122005-captive.shtml#9937 http://www.secuobs.com/news/comments731122005-captive.shtml#9937 ESRT @stevewerby - A new John the Ripper release Support added for PDF, SSH, RAR - via @Openwall and @r0bertmart1nez http://www.secuobs.com/twitter/news/216003.shtml http://www.secuobs.com/news/comments631122005-captive.shtml#9881 http://www.secuobs.com/news/comments631122005-captive.shtml#9881 ESRT @ithilgore - Ncrack wins http://www.secuobs.com/twitter/news/208977.shtml http://www.secuobs.com/news/comments631122005-captive.shtml#9677 http://www.secuobs.com/news/comments631122005-captive.shtml#9677 ESRT @revskills @aramosf - Hashcat-plus 0.04 - Worlds fastest md5crypt and phpass cracker http://www.secuobs.com/twitter/news/208983.shtml http://www.secuobs.com/news/comments631122005-captive.shtml#9674 http://www.secuobs.com/news/comments631122005-captive.shtml#9674 UPDATE THC-HYDRA v6.3 http://www.secuobs.com/revue/news/301854.shtml http://www.secuobs.com/news/comments631122005-captive.shtml#9508 http://www.secuobs.com/news/comments631122005-captive.shtml#9508 UPDATE Ncrack 0.4ALPHA http://www.secuobs.com/revue/news/301354.shtml http://www.secuobs.com/news/comments631122005-captive.shtml#9483 http://www.secuobs.com/news/comments631122005-captive.shtml#9483 UPDATE John the Ripper 1.7.7 http://www.secuobs.com/revue/news/301345.shtml http://www.secuobs.com/news/comments631122005-captive.shtml#9482 http://www.secuobs.com/news/comments631122005-captive.shtml#9482 Windows Credentials Editor v1.2 http://www.secuobs.com/revue/news/299559.shtml http://www.secuobs.com/news/comments631122005-captive.shtml#9419 http://www.secuobs.com/news/comments631122005-captive.shtml#9419 Cain Abel 4.9.40 released http://www.secuobs.com/revue/news/297089.shtml http://www.secuobs.com/news/comments631122005-captive.shtml#9316 http://www.secuobs.com/news/comments631122005-captive.shtml#9316 UPDATE THC-HYDRA v6.2 http://www.secuobs.com/revue/news/296864.shtml http://www.secuobs.com/news/comments631122005-captive.shtml#9313 http://www.secuobs.com/news/comments631122005-captive.shtml#9313 ESRT @t0ka7a - How-to: John the Ripper on a Ubuntu 10.04 MPI Cluster http://www.secuobs.com/twitter/news/181249.shtml http://www.secuobs.com/news/comments631122005-captive.shtml#9050 http://www.secuobs.com/news/comments631122005-captive.shtml#9050 UPDATE NiX Brute Forcer v1.1.2 http://www.secuobs.com/revue/news/289067.shtml http://www.secuobs.com/news/comments631122005-captive.shtml#9018 http://www.secuobs.com/news/comments631122005-captive.shtml#9018 ESRT @TomSellers @CrackMeIfYouCan - As announced at ShmooCon KoreLogic releases a LARGE set of wordlists for pwd cracking http://www.secuobs.com/twitter/news/171887.shtml http://www.secuobs.com/news/comments531122005-captive.shtml#8858 http://www.secuobs.com/news/comments531122005-captive.shtml#8858 UPDATE THC-HYDRA v6.1 http://www.secuobs.com/revue/news/282718.shtml http://www.secuobs.com/news/comments531122005-captive.shtml#8814 http://www.secuobs.com/news/comments531122005-captive.shtml#8814 UPDATE Cain Abel v4.9.38 http://www.secuobs.com/revue/news/282439.shtml http://www.secuobs.com/news/comments531122005-captive.shtml#8812 http://www.secuobs.com/news/comments531122005-captive.shtml#8812 UPDATE THC-HYDRA v6 http://www.secuobs.com/revue/news/280339.shtml http://www.secuobs.com/news/comments531122005-captive.shtml#8732 http://www.secuobs.com/news/comments531122005-captive.shtml#8732 ESRT @digininja - Just written a short ruby script to help with frequency analysis of cracked passwords http://www.secuobs.com/twitter/news/158940.shtml http://www.secuobs.com/news/comments531122005-captive.shtml#8504 http://www.secuobs.com/news/comments531122005-captive.shtml#8504 HashGrab2 Extract Username Password Hashes from SAM and SYSTEM Files http://www.secuobs.com/revue/news/274318.shtml http://www.secuobs.com/news/comments531122005-captive.shtml#8448 http://www.secuobs.com/news/comments531122005-captive.shtml#8448 ESRT @xanda @mubix - Muticore dictionary support in JTR using Hashcat utilities http://www.secuobs.com/twitter/news/156832.shtml http://www.secuobs.com/news/comments531122005-captive.shtml#8437 http://www.secuobs.com/news/comments531122005-captive.shtml#8437 New Tool HashCompare File Integrity Comparison Tool http://www.secuobs.com/revue/news/267526.shtml http://www.secuobs.com/news/comments531122005-captive.shtml#8165 http://www.secuobs.com/news/comments531122005-captive.shtml#8165 ESRT @mruef @lavakumark - Ravan - Javascript Distributed Computing System online, Cracks various hashes in pure JS http://www.secuobs.com/twitter/news/146099.shtml http://www.secuobs.com/news/comments531122005-captive.shtml#8148 http://www.secuobs.com/news/comments531122005-captive.shtml#8148 UPDATE Bruter v1.2 Beta 2 http://www.secuobs.com/revue/news/266551.shtml http://www.secuobs.com/news/comments531122005-captive.shtml#8102 http://www.secuobs.com/news/comments531122005-captive.shtml#8102 UPDATE Hydra v5.9 http://www.secuobs.com/revue/news/266370.shtml http://www.secuobs.com/news/comments531122005-captive.shtml#8074 http://www.secuobs.com/news/comments531122005-captive.shtml#8074 ESRT @ChrisJohnRiley @digininja - Releasing RSYaba, a modular bruteforcer supporting HTTPS, MySQL and SSH, more to follow http://www.secuobs.com/twitter/news/134184.shtml http://www.secuobs.com/news/comments431122005-captive.shtml#7820 http://www.secuobs.com/news/comments431122005-captive.shtml#7820 UPDATE Hydra v5.8 http://www.secuobs.com/revue/news/253977.shtml http://www.secuobs.com/news/comments431122005-captive.shtml#7597 http://www.secuobs.com/news/comments431122005-captive.shtml#7597 ESRT @ithilgore @Infolookup @iagox86 - Intro to Ncrack http://www.secuobs.com/twitter/news/125933.shtml http://www.secuobs.com/news/comments431122005-captive.shtml#7512 http://www.secuobs.com/news/comments431122005-captive.shtml#7512 Bruter v1.0 - parallel network login brute-forcer http://www.secuobs.com/revue/news/216214.shtml http://www.secuobs.com/news/comments431122005-captive.shtml#5939 http://www.secuobs.com/news/comments431122005-captive.shtml#5939 Optimizing John the Ripper's Single Mode for Dictionary Attacks http://www.secuobs.com/revue/news/215216.shtml http://www.secuobs.com/news/comments431122005-captive.shtml#5909 http://www.secuobs.com/news/comments431122005-captive.shtml#5909 NetCrack 2 development status http://www.secuobs.com/revue/news/213167.shtml http://www.secuobs.com/news/comments431122005-captive.shtml#5828 http://www.secuobs.com/news/comments431122005-captive.shtml#5828 Video : Automatically steal SAM and SYSTEM Files using HashGrab http://www.secuobs.com/revue/news/213012.shtml http://www.secuobs.com/news/comments431122005-captive.shtml#5823 http://www.secuobs.com/news/comments431122005-captive.shtml#5823 Common User Passwords Profiler CUPP v3 released http://www.secuobs.com/revue/news/208541.shtml http://www.secuobs.com/news/comments431122005-captive.shtml#5645 http://www.secuobs.com/news/comments431122005-captive.shtml#5645 Update Kon-Boot v1.1 http://www.secuobs.com/revue/news/208352.shtml http://www.secuobs.com/news/comments431122005-captive.shtml#5640 http://www.secuobs.com/news/comments431122005-captive.shtml#5640 Laverna's Brute 1.1 Released an open source cryptographic auditor, which supports brute forcing NTLM hashes. http://www.secuobs.com/revue/news/197825.shtml http://www.secuobs.com/news/comments431122005-captive.shtml#5271 http://www.secuobs.com/news/comments431122005-captive.shtml#5271 UPDATE John the Ripper 1.7.5 http://www.secuobs.com/revue/news/195828.shtml http://www.secuobs.com/news/comments431122005-captive.shtml#5213 http://www.secuobs.com/news/comments431122005-captive.shtml#5213 Medusa 2.0 Released, a speedy, massively parallel, modular, login brute-forcer http://www.secuobs.com/revue/news/192987.shtml http://www.secuobs.com/news/comments331122005-captive.shtml#5102 http://www.secuobs.com/news/comments331122005-captive.shtml#5102 Video : Tracing Unauthorized Login Attempts in Windows XP http://www.secuobs.com/revue/news/191778.shtml http://www.secuobs.com/news/comments331122005-captive.shtml#5057 http://www.secuobs.com/news/comments331122005-captive.shtml#5057 ncrack-0.01ALPHA.tar.gz a high-speed network authentication cracking tool http://www.secuobs.com/revue/news/184691.shtml http://www.secuobs.com/news/comments331122005-captive.shtml#4642 http://www.secuobs.com/news/comments331122005-captive.shtml#4642 john-1.7.4.2.tar.gz http://www.secuobs.com/revue/news/183453.shtml http://www.secuobs.com/news/comments331122005-captive.shtml#4593 http://www.secuobs.com/news/comments331122005-captive.shtml#4593 CeWL 3 - Custom Word List generator - JS redirect checking and a bug fix for an issue in the ruby spider gem http://www.secuobs.com/revue/news/182709.shtml http://www.secuobs.com/news/comments331122005-captive.shtml#4546 http://www.secuobs.com/news/comments331122005-captive.shtml#4546 John the Ripper 1.7.4 http://www.secuobs.com/revue/news/176680.shtml http://www.secuobs.com/news/comments331122005-captive.shtml#4292 http://www.secuobs.com/news/comments331122005-captive.shtml#4292 CeWL v2.2 Custom Word List generator - released http://www.secuobs.com/revue/news/153797.shtml http://www.secuobs.com/news/comments331122005-captive.shtml#3465 http://www.secuobs.com/news/comments331122005-captive.shtml#3465 Video : DistCrypt distributed password cracking using a java applet injected into an iframe (via Xmco Partners) http://www.youtube.com/watch?v=IdZT3QJVeSofmt=18 http://www.secuobs.com/news/comments331122005-captive.shtml#3460 http://www.secuobs.com/news/comments331122005-captive.shtml#3460 mapdav-1.0p5.tar.gz http://www.secuobs.com/revue/news/146715.shtml http://www.secuobs.com/news/comments331122005-captive.shtml#3236 http://www.secuobs.com/news/comments331122005-captive.shtml#3236 Bruter A Parallel Network Login Brute-Forcer http://www.secuobs.com/revue/news/146156.shtml http://www.secuobs.com/news/comments331122005-captive.shtml#3221 http://www.secuobs.com/news/comments331122005-captive.shtml#3221 Vidéo : Telnet Bruteforcing with XHydra and BackTrack-4 http://www.secuobs.com/videos/news/7962.shtml http://www.secuobs.com/news/comments331122005-captive.shtml#3130 http://www.secuobs.com/news/comments331122005-captive.shtml#3130 Vidéo : Dissecting the hack, the f0rb1dd3n network http://www.secuobs.com/videos/news/8655.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#3126 http://www.secuobs.com/news/comments231122005-captive.shtml#3126 John the Ripper 1.7.3.4 released http://www.secuobs.com/revue/news/142941.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#3088 http://www.secuobs.com/news/comments231122005-captive.shtml#3088 Mobius Forensic Toolkit 0.4.8 http://www.secuobs.com/revue/news/142999.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#3087 http://www.secuobs.com/news/comments231122005-captive.shtml#3087 Vidéo : Phishing Attack using the Social Engineering Toolkit http://www.secuobs.com/revue/news/142548.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#3070 http://www.secuobs.com/news/comments231122005-captive.shtml#3070 ESRT @ffxp @humanhacker Social Engineering Framework http://www.secuobs.com/twitter/news/23622.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#3045 http://www.secuobs.com/news/comments231122005-captive.shtml#3045 Password Auditing with Fgdump, John the Ripper PowerShell http://www.secuobs.com/revue/news/140496.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#3041 http://www.secuobs.com/news/comments231122005-captive.shtml#3041 New version of WiKID authentication server communauty edition http://www.secuobs.com/revue/news/135130.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#2928 http://www.secuobs.com/news/comments231122005-captive.shtml#2928 Hackers Using Trojans to Steal One-Time Passwords http://www.secuobs.com/revue/news/132987.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#2831 http://www.secuobs.com/news/comments231122005-captive.shtml#2831 RevDump v0.2 to dump password stored using reversible encryption http://www.secuobs.com/revue/news/131218.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#2762 http://www.secuobs.com/news/comments231122005-captive.shtml#2762 Vidéo : Salty Hashes Hak5 http://www.secuobs.com/videos/news/7317.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#2611 http://www.secuobs.com/news/comments231122005-captive.shtml#2611 NullSearchAccess 1.2 default logins scanner for ftp, pop3, imap, mysql, and more http://www.secuobs.com/revue/news/122112.shtml http://www.secuobs.com/news/comments231122005-captive.shtml#2413 http://www.secuobs.com/news/comments231122005-captive.shtml#2413 ESRT @IBMFedCyber software to mask confidential information online http://www.secuobs.com/twitter/news/8921.shtml http://www.secuobs.com/news/comments131122005-captive.shtml#2362 http://www.secuobs.com/news/comments131122005-captive.shtml#2362 Vidéo : Kon-Boot pownage of BackTrack 4 Beta http://www.secuobs.com/videos/news/7139.shtml http://www.secuobs.com/news/comments131122005-captive.shtml#2320 http://www.secuobs.com/news/comments131122005-captive.shtml#2320 Masked Passwords Debate Redux http://www.secuobs.com/revue/news/118976.shtml http://www.secuobs.com/news/comments131122005-captive.shtml#2305 http://www.secuobs.com/news/comments131122005-captive.shtml#2305 Kon-Boot from USB to Bypass Windows and Linux login passwords http://www.secuobs.com/revue/news/117941.shtml http://www.secuobs.com/news/comments131122005-captive.shtml#2279 http://www.secuobs.com/news/comments131122005-captive.shtml#2279 ESRT @smaret Tutoriel authentification forte OpenID et certificat numérique http://www.secuobs.com/twitter/news/6782.shtml http://www.secuobs.com/news/comments131122005-captive.shtml#2236 http://www.secuobs.com/news/comments131122005-captive.shtml#2236 Vidéo : Dictionary Attack on a Wireless Router using Hydra http://www.secuobs.com/revue/news/115382.shtml http://www.secuobs.com/news/comments131122005-captive.shtml#2161 http://www.secuobs.com/news/comments131122005-captive.shtml#2161 MAPDAV 1.0p3 More Accurate Password Dictionary Attack Vector http://www.secuobs.com/revue/news/114272.shtml http://www.secuobs.com/news/comments131122005-captive.shtml#2118 http://www.secuobs.com/news/comments131122005-captive.shtml#2118 WiKID a Commercial Open Source Two-Factor Authentication tool http://www.secuobs.com/revue/news/111387.shtml http://www.secuobs.com/news/comments131122005-captive.shtml#1994 http://www.secuobs.com/news/comments131122005-captive.shtml#1994 ESRT @devilok - Ophcrack 330 and ophcrack LiveCD 230 released http://www.secuobs.com/twitter/news/2630.shtml http://www.secuobs.com/news/comments131122005-captive.shtml#1880 http://www.secuobs.com/news/comments131122005-captive.shtml#1880 Kon-Boot post (minor) update http://www.secuobs.com/revue/news/103626.shtml http://www.secuobs.com/news/comments131122005-captive.shtml#1725 http://www.secuobs.com/news/comments131122005-captive.shtml#1725 Tutoriel Kon-boot, contourner le mot de passe sous XP, Vista et Linux http://www.crack-wpa.fr/tutoriel-kon-boot-acces-root-admin-xp-vista-linux.php http://www.secuobs.com/news/comments131122005-captive.shtml#1319 http://www.secuobs.com/news/comments131122005-captive.shtml#1319 Video : Using Backtrack to 0wn Windows Vista http://www.secuobs.com/revue/news/91157.shtml http://www.secuobs.com/news/comments31122005-captive.shtml#1303 http://www.secuobs.com/news/comments31122005-captive.shtml#1303 Remote-Exploit : CUPP Tool - Common User Passwords Profiler http://www.remote-exploit.org/codes_cupp.html http://www.secuobs.com/news/comments31122005-captive.shtml#1266 http://www.secuobs.com/news/comments31122005-captive.shtml#1266 KON-BOOT for Windows and Linux (Password Bypassing Utility for Forgetting Heads) http://www.secuobs.com/secumail/fdsecumail/msg23821.shtml http://www.secuobs.com/news/comments31122005-captive.shtml#1091 http://www.secuobs.com/news/comments31122005-captive.shtml#1091 Internet users still using same password for all Web sites http://www.secuobs.com/revue/news/70230.shtml http://www.secuobs.com/news/comments31122005-captive.shtml#724 http://www.secuobs.com/news/comments31122005-captive.shtml#724 The Associative Word List Generator (AWLG) - Create Related Wordlists for Password Cracking http://www.secuobs.com/revue/news/51211.shtml http://www.secuobs.com/news/comments31122005-captive.shtml#450 http://www.secuobs.com/news/comments31122005-captive.shtml#450 en l'état ça ne semble pas possible de récupérer la base SAM locale à part en exploitant une vulnérabilité du système ou d'une application tierce pour récupérer des fichiers à distance dont la base SAM mais si tu as de tels droits tu n'as surement plus besoin de faire quoi que ce soit avec cette base ailleurs ... http://www.secuobs.com/news/comments31122005-captive.shtml#285 http://www.secuobs.com/news/comments31122005-captive.shtml#285 mais avec quelle logiciel va tu capturer la sam d'un windows. Sachant que le PC qui fait sa est sous linux. ouslie@hotmail.fr http://www.secuobs.com/news/comments31122005-captive.shtml#284 http://www.secuobs.com/news/comments31122005-captive.shtml#284 Si la question est "est-ce que je peux prendre la base SAM sur une machine windows et la déplacer vers une machine linux pour la traiter puir la ramener sur la machine windows et m'authentifier avec les nouveaux credentials ?", la réponse est oui sans aucun souçis ... http://www.secuobs.com/news/comments31122005-captive.shtml#283 http://www.secuobs.com/news/comments31122005-captive.shtml#283 Salut je voulais savoir si on peut faire sa en réseau local, avec un pc sous linux qui recupérait la SAM d'un pc windows ouslie@hotmail.fr http://www.secuobs.com/news/comments31122005-captive.shtml#282 http://www.secuobs.com/news/comments31122005-captive.shtml#282 qursquo;est ce qui t en empeche \? http://www.secuobs.com/news/comments31122005-captive.shtml#42 http://www.secuobs.com/news/comments31122005-captive.shtml#42 je veux vraiment changer mon mot de passe\ http://www.secuobs.com/news/comments31122005-captive.shtml#41 http://www.secuobs.com/news/comments31122005-captive.shtml#41