Technique
technique:password_cracking
Also: hash cracking, password compromise
The process of trying likely passwords against accounts; the episode describes the RockYou list as useful for this activity.
The process of trying likely passwords against accounts; the episode describes the RockYou list as useful for this activity.
“this is a massive list of actual passwords people are using”
“the very best password list you could use when cracking passwords”
Recovering clear-text passwords from the exposed LinkedIn password hashes.
“someone tried their best at cracking the 100 million credentials”
Recovering passwords from password hashes using a cracking tool.
“you need to run a password-cracking tool to figure out what the password is once you get the hashes”
Recovery or compromise of passwords during a penetration test.
“they were able to crack twenty-five percent of all our passwords company-wide”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | INVOLVES | World Bank network intrusion | Explicit | 91 |
World Bank network intrusion INVOLVES Password cracking
The investigation involved obtaining password hashes and cracking the enterprise administrator password.
Explicit Confidence 99% · Jack Rhysider EP 91 Details
“she decided to get the hashes herself and see if she could crack the password”
“was able to pull out the passwords for the enterprise admin rather quickly”