Penetration Testing: RE: Password Audit tools

["Cotter, Joe" <jcotter () everestusa com>]

You can also try Retina from eEye. It's more of an all-around tool, but it does a pretty good job with basic password 
audits as well. I've used Retina (can't afford anything more than a temp license) with a LOT of success. For a 
windows-based tool it's pretty good.
 
-Joe

________________________________

From: Jeffrey M.Miller CISSP [mailto:jmiller () acumeninfosec com]
Sent: Mon 12/13/2004 7:10 PM
To: pen-test () securityfocus com
Subject: Password Audit tools



I've used Internet Security Scanner from ISS and really like it's
ability to pull users from NT domains and test common passwords, such
as username=password, password=password, etc.

I've considered purchasing the consultant version of l0phtcrack LC5.

Has anyone used LC5 and can anyone compare it to ISS?  Also are there
any OpenSource tools that can do these sorts of checks?

Thanks

J_