Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: RE: Password secured using? |
|---|---|
| Date: | 26 Apr 2006 06:44:25 -0000 |
Thanks for the various responses I received regarding my question. As Jim
suggested, I tried entering variations of the password and recorded them down
as they appeared in the config file after I saved them. Here they are.
a=a5b
aa=553c6
aaa=0401785
a=553
aa=9455b
aaa=83e455b
a=285
aa=7073e
aaa=0401785
a=707
aa=a5b40
aaa=9455b40
a=358
aa=9455b
aaa=a5b401
There are consistencies. Single letter password appears as 3
characters in the config file, two letter shows up as 5 and three letter as 7.
Repeat patterns include repeating 707, 553, a5b and 040. I did manage to get a
collision where aaa had repeats of 0401785. Any ideas?
------------------------------------------------------------------------------
This List Sponsored by: Cenzic
Concerned about Web Application Security?
Why not go with the #1 solution - Cenzic, the only one to win the Analyst's
Choice Award from eWeek. As attacks through web applications continue to rise,
you need to proactively protect your applications from hackers. Cenzic has the
most comprehensive solutions to meet your application security penetration
testing and vulnerability management needs. You have an option to go with a
managed service (Cenzic ClickToSecure) or an enterprise software
(Cenzic Hailstorm). Download FREE whitepaper on how a managed service can
help you: http://www.cenzic.com/news_events/wpappsec.php
And, now for a limited time we can do a FREE audit for you to confirm your
results from other product. Contact us at request@cenzic.com for details.
------------------------------------------------------------------------------
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: Live Linux Distro, joshuaperrymon |
|---|---|
| Next by Date: | Re: privelege escalation with .bat files, Michael Hendrickx |
| Previous by Thread: | New article on SecurityFocus: Forensic Felonies, Erin Carroll |
| Next by Thread: | Re: RE: Password secured using?, barcajax |
| Indexes: | [Date] [Thread] [Top] [All Lists] |