Password Cracking and Security

Flashcards covering key terms and concepts related to password cracking techniques, tools, and security measures.

Password Cracking

The process of using an application program to identify an unknown or forgotten password to a computer or network resource.

Password Cracking Outcomes

Malicious actors can steal banking credentials or use information for identity theft and fraud.

Hashes

Mathematical functions that change arbitrary-length inputs into an encrypted fixed-length output.

Brute-Force Attack

A method that runs through combinations of characters of a predetermined length until it finds the combination that matches the password.

Dictionary Search

A method where a password cracker searches each word in the dictionary for the correct password.

Phishing

Attacks that are used to gain access to user passwords without the use of a password cracking tool, where a user is fooled into clicking on an email attachment.

Malware

Similar to phishing, using malware is another method of gaining unauthorized access to passwords without the use of a password cracking tool, such as keyloggers to track keystrokes, or screen scrapers.

Rainbow Attack

An approach that involves using different words from the original password in order to generate other possible passwords, often kept in a rainbow table.

Guessing

An attacker may be able to guess a password without the use of tools based on information about the victim.

Hybrid Attack Methodologies

Password cracking programs that search for combinations of dictionary entries and numbers or special characters.

Cain and Abel

Password recovery software that can recover passwords for Microsoft Windows user accounts and Microsoft Access passwords, uses dictionary lists and brute-force attack methods.

Ophcrack

This password cracker uses rainbow tables and brute-force attacks to crack passwords and runs on Windows, macOS and Linux.

John the Ripper

This tool uses a dictionary list approach and is available primarily for macOS and Linux systems.

Legality of Password Cracking

Using a password cracking method to access one's own password is legal; using these methods or tools to gain access to someone else's password can lead to criminal charges.

Strong Password

Should be at least 12 characters long, combine letters and a variety of characters, avoid reusing a password, avoid easy-to-guess phrases, and use encryption.