Moxie Marlinspike's CloudCracker Aims For Speedier, Cheaper Password Cracking
InfoSec News <[email protected]> Wed, 15 Feb 2012 03:39:18 -0600 (CST)
| Newsgroups | gmane.comp.security.attrition.infosec-news |
|---|---|
| Message-ID | <[email protected]> |
This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. --742952673-290943336-1329298284=:5797 Content-Type: TEXT/PLAIN; FORMAT=flowed; CHARSET=UTF-8 Content-ID: <alpine.DEB.2.02.1202150339022.5944-+lq4ijtN3NWD1tnzEPnUTA@public.gmane.org> Content-Transfer-Encoding: quoted-printable http://www.forbes.com/sites/andygreenberg/2012/02/14/moxie-marlinspikes-c= loudcracker-aims-for-speedier-cheaper-password-cracking/ By Andy Greenberg Forbes Staff 2/14/2012 A little over two years ago, well-known hacker and security researcher=20 Moxie Marlinspike launched an online service that, for a fee of $17,=20 could crack most wifi networks=E2=80=99 password in less than hour. Appar= ently=20 that wasn=E2=80=99t fast enough. On Tuesday, Marlinspike launched CloudCracker, an upgrade to the=20 Web-based penetration testing service he formerly called WPACracker,=20 with a major upgrade to the speed and versatility of that=20 password-breaking service. For $17, CloudCracker can now break into a=20 standard WPA-PSK wireless networks by burning through dictionaries of=20 possible passwords at about twice the speed of WPACracker, exhausting=20 600 million words in one hour instead of 260 million in the previous=20 version . For networks with especially obscure passwords, the tool can now use=20 dictionaries as big as 4.8 billion words in the same amount of time for=20 the price of $136. And instead of only focusing on cracking wifi=20 networks, the tool can now break passwords protected by Microsoft=E2=80=98= s=20 Windows LAN Manager and NT LAN Manager hashing systems too, for a price=20 of fifty cents for every password. Marlinspike says he hopes to add more=20 password formats in the future. =E2=80=9CWe=E2=80=99re really trying to push the envelope in terms of pas= sword=20 cracking,=E2=80=9D says Marlinspike, a well known security researcher who= now=20 works for Twitter but built CloudCracker as an independent project.=20 =E2=80=9CBasically you get more dictionaries for your dollar, about twice= the=20 cracking power for the same price.=E2=80=9D [...] --742952673-290943336-1329298284=:5797 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ______________________________________________________________________________ Certified Ethical Hacker and CISSP training with Expanding Security gives the best training and support. Get a free live class invite weekly. Best program, best price. www.ExpandingSecurity.com/PainPill --742952673-290943336-1329298284=:5797--