Thema: L0phtcrack ist zurück

[SiLæncer]

Statt der Rückkehr des Duke gibt es nun die Rückkehr des legendären Passwortcrackers L0phtcrack – und zwar in Version 6. Nach dem Kauf des unter anderem aus den L0pht Heavy Industries hervorgegangenen Unternehmens @stake durch Symantec war L0phtcrack vom Markt verschwunden. Das ehemalige L0phtcrack-Team aus Christien Rioux, Chris Wysopal und Peiter Zatkhat (Mudge) hat Anfang des Jahres die Rechte an dem Tool von Symantec zurückgekauft und es weiterentwickelt.

Version 6 läuft nun auch auf 64-Bit-Versionen von Windows und unterstützt Mehrkernsysteme sowie vorberechnete Hash-Tabellen (Rainbow-Tables), um Windows- und Unix-Passwörter zu knacken beziehungsweise um "ihre Stärke zu testen". Die Tests lassen sich lokal und über das Netzwerk in regelmäßigen Abständen automatisch durchführen. Ein Report zeigt eine Zusammenfassung der Ergebnisse grafisch an.

Ansonsten hat sich nicht viel geändert. Weiterhin hilft ein Wizard beim Vorbereiten verschiedener Tests. Die Bedienoberfläche ist ein wenig aufgehübscht, aber alle Elemente sind am alten Platz.

Eine 14-Tage-Trial-Version steht zum Download bereit. L0phtcrack unterliegt allerdings nach Angaben der Entwickler der Exportkontrolle der USA, sodass es nur für Anwender innerhalb der USA zur Verfügung steht. Alternativ zu L0phtcrack bieten sich auch die kostenlosen Passwortcracker Cain & Abel sowie John the Ripper an.

Quelle : www.heise.de

[SiLæncer]

Changelog

All New Cracking Engine:

L0phtCrack 7's cracking engine has been completely replaced with a state-of-the-art cracking engine, John the Ripper. Performance is greatly improved for dictionary and brute force audits. Many more password hash types are now supported.

GPU Support:

Harnessing the computing capabilities of GPUs in graphics cards is a significant advance in password auditing. GPUs can be faster than traditional CPUs for certain password auditing operations. L0phtCrack 7 now supports the two most popular GPUs: AMD Radeon and NVIDIA. Password audits now take hours instead of days. L0phtCrack can support multiple GPU cards for exceptionally fast password auditing. A new calibration process selects the fastest cracking algorithm for the machine's CPU and GPU.

Improved Unix Password Support:

L0phtCrack 7 imports and cracks Unix password files from Linux, Solaris, OpenBSD, FreeBSD, and AIX systems. Password hashes can be imported remotely via SSH or from shadow files or passwd plus shadow files for more user detail. Perform password audits of Windows and Unix from a single interface.

Remote Windows Password Import Improvements:

L0phtCrack 7's remote Windows password import agent can now work over SMB so you don't have to open any additional ports or make configuration changes to the way you already remotely manage a machine.

Audit Scheduler Interface Improvements:

System administrators can schedule routine audits as before. Audits can be performed daily, weekly, monthly, or just once, depending on the organization's auditing requirements. The scheduling interface is much improved. Visibility into multiple jobs is possible.

Plug-in Support:

L0phtCrack 7 is now extensible through a plug-in interface. New password hash importers, new password hash cracking support, and new reporting functionality can be added by 3rd parties and easily installed by end users.

Updated GUI:

The user interface is improved and updated. A new improved wizard makes common auditing tasks easy for first time users. Advanced users have precise control over importing from multiple systems and fine tuning their auditing job. Current status while an audit is running is clear and responsive.

[close]

http://www.l0phtcrack.com/

[SiLæncer]

Changelog

In some cases, automatic updates were not working. If the built-in updater does not work for you, please re-download the newest installer to upgrade.
On newest AMD drivers, GPU Util/Temp/Fan meters and GPU temperate monitoring was not working.
JTREXE was crashing on some versions of Windows when a queue item finished CSV export had embedded newlines in fields
Removing imported accounts wasn't working correctly all the time Multimonitor setups had issues with DPI scaling and switching

[close]

http://www.l0phtcrack.com/

[SiLæncer]

Whats new:>>

Open source release
Replaced commercial libraries with OpenSSL and LibSSH2
Improved SSH importing to support IPV6

https://l0phtcrack.gitlab.io/