RE: Password Audits

["Rochford, Paul" <paul.rochford () hp com>]

Remember once the password goes beyond 14 characters the LM and NTLM
hash is not stored. 

Good article on this:

http://www.windowsecurity.com/articles/Protect-Weak-Authentication-Proto
cols-Passwords.html

Kind Regards,
Paul Rochford 


-----Original Message-----
From: tmanster [mailto:tmanster () gmail com] 
Sent: Monday, April 25, 2005 10:03 PM
To: Jair; security-basics () securityfocus com
Subject: Re: Password Audits


This might do the trick for you.

http://freshmeat.net/projects/john/

T

On Fri, 22 Apr 2005 15:53:00 -0400, Jair <jairgerald () hotmail com> wrote:

> Hi Fellows,
>
> I am using LC5 tool for audit windows 2000 users passwords and look 
> like it only work with 14 characters passwords or less, I know some 
> users have some long passwords over 14 characters and LC5 doesn't show

> me information about them.
>
> do you guys know if is a tool who can break long passwords ?
>
> Thanks for you help