Moxie Marlinspike's CloudCracker Aims For Speedier, Cheaper Password Cracking

InfoSec News <[email protected]> Wed, 15 Feb 2012 03:39:18 -0600 (CST)
Newsgroups gmane.comp.security.attrition.infosec-news
Message-ID <[email protected]>
  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

--742952673-290943336-1329298284=:5797
Content-Type: TEXT/PLAIN; FORMAT=flowed; CHARSET=UTF-8
Content-ID: <alpine.DEB.2.02.1202150339022.5944-+lq4ijtN3NWD1tnzEPnUTA@public.gmane.org>
Content-Transfer-Encoding: quoted-printable

http://www.forbes.com/sites/andygreenberg/2012/02/14/moxie-marlinspikes-c=
loudcracker-aims-for-speedier-cheaper-password-cracking/

By Andy Greenberg
Forbes Staff
2/14/2012

A little over two years ago, well-known hacker and security researcher=20
Moxie Marlinspike launched an online service that, for a fee of $17,=20
could crack most wifi networks=E2=80=99 password in less than hour. Appar=
ently=20
that wasn=E2=80=99t fast enough.

On Tuesday, Marlinspike launched CloudCracker, an upgrade to the=20
Web-based penetration testing service he formerly called WPACracker,=20
with a major upgrade to the speed and versatility of that=20
password-breaking service. For $17, CloudCracker can now break into a=20
standard WPA-PSK wireless networks by burning through dictionaries of=20
possible passwords at about twice the speed of WPACracker, exhausting=20
600 million words in one hour instead of 260 million in the previous=20
version .

For networks with especially obscure passwords, the tool can now use=20
dictionaries as big as 4.8 billion words in the same amount of time for=20
the price of $136. And instead of only focusing on cracking wifi=20
networks, the tool can now break passwords protected by Microsoft=E2=80=98=
s=20
Windows LAN Manager and NT LAN Manager hashing systems too, for a price=20
of fifty cents for every password. Marlinspike says he hopes to add more=20
password formats in the future.

=E2=80=9CWe=E2=80=99re really trying to push the envelope in terms of pas=
sword=20
cracking,=E2=80=9D says Marlinspike, a well known security researcher who=
 now=20
works for Twitter but built CloudCracker as an independent project.=20
=E2=80=9CBasically you get more dictionaries for your dollar, about twice=
 the=20
cracking power for the same price.=E2=80=9D

[...]


--742952673-290943336-1329298284=:5797
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

______________________________________________________________________________
Certified Ethical Hacker and CISSP training with Expanding Security gives
the best training and support.
Get a free live class invite weekly.  Best program, best price.
www.ExpandingSecurity.com/PainPill
--742952673-290943336-1329298284=:5797--