Penetration Testing mailing list archives

RE: L0phtCrack 3.0


From: Seth Georgion <sgeorgion () ecloser com>
Date: Fri, 8 Jun 2001 10:46:45 -0700

Have you looked at the licensing model? We were using it for $300 bucks to
crack passwords on a monthly basis. Now it has a distributed version that
you can install on multiple small machines to speed it up but you have to
pay for each unit as a fresh install! Even though the software has gotten
much slower.

-----Original Message-----
From: Block, Edward [mailto:BLOCKED () mail northgrum com]
Sent: Friday, June 08, 2001 5:37 AM
To: Parth_Galen () ziplip com; pen-test () securityfocus com
Subject: RE: L0phtCrack 3.0


I've noticed the same thing.  Same machine running 2.x would crack the
username=password in under 5 seconds, now it is upward of 30.  The
dictionary attack, which used to take under a couple minutes is now pushing
20+.  I don't know when I'll have time to investigate, but I'm John is
looking better everyday.

Eddie

-----Original Message-----
From: Parth Galen [SMTP:Parth_Galen () ziplip com]
Sent: Monday, June 04, 2001 5:21 PM
To:   pen-test () securityfocus com
Subject:      L0phtCrack 3.0

I recently upgraded to 3.0, and have found that it "appears" to run MUCH
slower. I have checked the settings and documentation, but nothing I have
noticed points to why there would be a noticable slowdown in cracting.

With 2.5 I would get the trivials in seconds. With 3.0 and the same sam_
it takes more than a day to get the most trivial which should have shown
up in a basic dictionary.

I understand the 3.0 now cracks sam's that are SYSKEY'd, could that be
part of it?

Any comments will be much appreciated!

Parth


Current thread: