Posts

Showing posts from October, 2009

Brutus - a Brute force online password cracker

Brutus is an online based password cracker. It works by trying to break telnet, POP3, FTP, HTTP, RAS or IMAP by simply trying to login as a legitimate users. Brutus imitates a real outside attack (unlike other password cracking applications that simulate an internal attack) and thus serves as a valuable security-auditing tool. Brutus can run in single user mode (trying to break into a single user's account by trying different password combinations) or by trying a list of user/password combinations from a word file. The application scans the host for known services and can be easily customized to break-in any other custom service requiring interactive logon of a username and a password. Using Brutus will teach you a lot about your system, since it simulates a real attack. To make a good use of Brutus's attack simulation an administrator should that note whether the break-in attempts are logged, and whether a timeout is issued after a few failed logins - this can be easily seen b

PWDUMP6 - Windows Powerful Password Recovery Tool

A significantly modified version of pwdump3e, this program is able to extract NTLM and LanMan hashes from a Windows target, regardless of whether Syskey is enabled. It is also capable of displaying password histories if they are available. It outputs the data in L0phtcrack-compatible form, and can write to an output file. More information on Pwdump6 @ http://www.foofus.net/fizzgig/pwdump /

Best password recovery tool for Windows - Cain and Abel

Cain & Abel is a password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, recovering wireless network keys, revealing password boxes, uncovering cached passwords and analyzing routing protocols. The program does not exploit any software vulnerabilities or bugs that could not be fixed with little effort. It covers some security aspects/weakness present in protocol's standards, authentication methods and caching mechanisms; its main purpose is the simplified recovery of passwords and credentials from various sources, however it also ships some "non standard" utilities for Microsoft Windows users. More information on Cain and Abel @ http://www.oxid.it/cain.html

Best Password Cracking Procedure

http://www.youtube.com/watch?v=6bNtMPKafk0 How To Crack GMAIL Yahoo MSN email Passwords, Password Cracking Step by Step Videos Download, How to crack Exchange Server account password

NLB Common Troubleshooting Steps

Following are the general steps that one may want to try while troubleshooting commong NLB (WLBS) issues like: 1) Nodes not converging. 2) Adding a node to the NLB cluster stops the cluster from working. 3) Unable to access NLB from another VLAN. 4) NLB not working properly. 1) First collect the "WLBS Display" logs from all the nodes. Compare them for any mismatching rule or Parameter. Try to find if you see frequent convergence happening. If you see lot of convergence happening but nodes never getting converged then you might want to check the heart beat communication. If you find an error message like "cluster Mode Stopped" then again youmight want to check the heart beat communication as well as for any misconfiguration in the NICs. Also make sure that your NICs drivers are updated and you don't have teaming enabled on the nodes. Teaming causes lot of such issue. Moreover NLB cluster is not recommended with teaming enabled on the nodes. 2) Try to ping the VIP

Windows Server 2008 Hyper V Step by Step

Microsoft today had a webcast to announce what many people in the industry already knew, Windows Server 2008 Hyper-V. This is not an updated version of Virtual Server 2005 but a hypervisor from Microsoft. My boss expects it take over VMWare in a couple of year but I'm not sold yet. I am surprised at how developed (at least on paper) it already seems to be. Microsoft says it has support for Windows product lines and Linux (Novell now, Redhat in January) in their presentation. You can deploy it with 2008 Server Core as well. Hyper-V costs $28 which seems insanely cheap for Microsoft, the presentation said you can spend $28 and consolidate your Windows 2003 machines on it. I will have to download 2008 RC1 with Hyper-V and check out the features more in depth. Things that stood out in the presentation. Hyper-V server costs $28! Low overhead design from the beginning (for Microsoft). Server Core. MMC 3.0 UI. 1/3 cost of VMware (Says Microsoft) I tend to believe that last point since peo

How to set size limits for messages in Exchange Server

I am glad that Microsoft has a KB article that reviews setting size limits on the Exchange Server. Wishlist: One place (or a script) to put a setting and override all other settings. Click Here --> Microsoft Link or go to ( http://support.microsoft.com/kb/322679 ) Granted, this should not be something that is needed often.