Project 7-1

Top: Shows how long an Rainbow table attack takes to crack a password.

Today password attack is common to script-kiddies and also to hackers. As new software is develop better features and speed start to enhance. This software is also make available through the internet and can be download for free.

Firstly, password are encrypted and stored also called as "Hash". Hash is used when a user enter his password it is then hashed and compare with the stored hashed version. Last time attacker will normally steal the hashed password and then break it offline. There is altogether 3 different way to break a password this days. Brute Force Attack, Dictionary Attack and Rainbow Tables.

Brute Force Attack is typically guessing the password through combining a random combination of characters also say forcing his way in, this is a less approach way as it takes time for it to be cracked.

Dictionary Attack, attack will start by creating hashes of common dictionary words and compare it with those of the stolen password file. Dictionary Attack is the average use of attack nowadays and is also an offline method of attack.

Rainbow Tables, this attack is the most fastest and dangerous to users. It creates a large pregenerated data set of hashes from nearly every possible password combination. Rainbow Tables is typically harder to setup, but after setting up it works really quick by cracking password in seconds. You are require to create or download the table itself and install it into your Rainbow table software.

In this project, i am going to use a free download software called "OPHcrack". It typically make use of the Window Operating system hash. It require 3 different section User/LM Hash/NT Hash. Even the hash table is available online and can be installed into the OPHcrack to crack your current operating system password.

How to use Rainbow tables:
  1. Go to OPHcrack download the windows version.
  2. Select download tab at OPHcrack website. Download the table needed.
  3. After installing, click "Tables" and browse to your downloaded table and install it.
  4. Click "Load" and then "Local SAM".
  5. Click "Crack"
  6. It will now crack your current password located in your operating system
*Important details of keeping your password safe*
Rainbow table can also be used to crack those password that your forget.
Rainbow table doesn't crack every single hash within seconds. It depends on how hard your password is. Example "10123kaerm2i4;1#" takes longer time compare to "hello".

Because of this, password should be at least 8 char long, have no dictionary words in it and must have different kind of symbols to make it harder for it to cracked.

P1062344 posted during Saturday, July 17, 2010 at 9:40 PM

About Me

Name: Maverick Yong Kim Wee
Chinese Name: 杨 金 辉
Admin No: P1062344
Class: DISM 1A/01

No.of readers

Comments