Forum Home
Press F1
 
Thread ID: 27618 2002-11-26 23:31:00 How Hard is this??? Brendonny (929) Press F1
Post ID Timestamp Content User
101750 2002-11-26 23:31:00 How hard would it be to crack this windows 2000 password??? Would it take like forever?? 1 minute, 2 minutes???

SpiDerBait! I*n Th^E f#orm o&F 19~63!45!~0 cArrOts

I use Windows 2000 Professional on a network and that is one of my really old passwords. Yes it has all those capitals, chracters and numbers in it. It isn't written down anywhere.
I tend to change them once a week but if it takes less time for a password hacking program to crack it then I will change it more often.
So how long would it take??

Brendonny
Brendonny (929)
101751 2002-11-26 23:47:00 This isn't really the forum for asking about cracking/hacking etc. your best bet would be to ask on one of the sicurity forums (or hacking hangouts)

however passwords like "SpiDerBait! I*n Th^E f#orm o&F 19~63!45!~0 cArrOts" are quite good. nice and long, and are not a simple word that can be easly cracked by dictionary attack.

time frame i have no idea, it depends on what sort of access to pc the person has. if they already have full access then digging out the password should be easy however if they already have full aceess your password won't be needed.
tweak'e (174)
101752 2002-11-27 00:04:00 Links

ntsecurity.net
sysopt.earthweb.com

Of course, you'd have to brute force your password. It could take some days or weeks to crack.

You'll be fine.
gibler (49)
101753 2002-11-27 00:13:00 Now this is a scary piece of software:
www.atstake.com
Chilling_Silence (9)
101754 2002-11-27 00:29:00 Can 2000 passwords actually include spaces? Greg S (201)
101755 2002-11-27 02:18:00 How do you remember a password like that? Words of that style would be "reasonably" safe . Your account would be way down the list of those to be broken into .

It's possible to be too paranoid .

Password cracking needs a breakin of some sort to get the password file, which should be accessible only to people with system privileges .

The passwords are stored in encrypted form: your system administrator can't read your password . A cracker then runs a programme such as crack, which will use a dictionary of commonly used passwords, common words, etc, encrypting each in turn and comparing with the list of encrypted passwords . It also adds numbers at the start and end, modifies case of letters etc . This uses a lot of CPU cycles . It normally finds a number of weak passwords in any system --- quite often the administrator password ;-) .


System administrators often run a background process to use crack on the password file, and automatically email users who have "weak" passwords .

If all yours are like that example, you are unlikely to get such an email . :D
Graham L (2)
101756 2002-11-27 03:17:00 >
> The passwords are stored in encrypted form: your
> system administrator can't read your password. A
> cracker then runs a programme such as crack, which
> will use a dictionary of commonly used passwords,
> common words, etc, encrypting each in turn and
> comparing with the list of encrypted passwords. It
> also adds numbers at the start and end, modifies
> case of letters etc. This uses a lot of CPU cycles.
> It normally finds a number of weak passwords in any
> system --- quite often the administrator password

Not so if they're running anything but 2K and XP - Use the software above on any NT machine and it'll bring up that admin password in a few seconds in a dictionary build. In 30 seconds it'd gone through its own dictionary for me. It's currently doing a Brute Strength method at about 450,000 attempts per second.

If its over 8 Characters, then its a whole lot safer. As a rule of thumb, mine are always at least 8 (But at the moment they're all 11 or longer!)
Also, Including special characters is good too!
AFAIK:
¿
Can be inserted into your windows password too, so by holding down alt and then on the right keypad pressing 0 1 9 1 and then release, it'll bring up that (Use notepad to test it). Most password crackers/hackers fully forget those special characters, making you password that little bit harder to get (Well, A LOT harder to get).

Cheers


Chilling_Silence

(BTW, After a few hours, it still hasnt got mine password!!!)
Chilling_Silence (9)
101757 2002-11-27 03:50:00 Thanks! My mates think that it is very fun to try and crack my password! Haven't managed to get it yet. They know I change it every week and they try just about every method known to mankind.
Everything from key logger program to password crackers to all sorts of stuff. They have even tried to record me typing it in! It didn't work cos' I type really fast.
As to the key loggers they failed with those as well! Since I am on a network I just popped over to another computer and used that and went through dos and deleted the key logger.
All they really want to know is what is my password also cos' I have some good files that they want to look at. I forgot about those special characters but I can use them now. I wasn't actually asking where to get a program to crack my own password I just wanted to know if it was possible to crack within a few days.
As to remembering my password without forgeting them I don't write them down but I remember off the top of my head. To create one of my passwords I start out with a random sentence like

Zoltrix modems are a red and black striped birds

From there I put in capitals here and there

ZoLtRix mOdeMs ARe a ReD ANd BlaCK StrIpEd BiRdS

Now I put in a few characters

Zo~LtRi!x m^Od)eMs >AR-e a R#eD AN$d B"la*CK StrI%pEd Bi&Rd;S

Then maybe a few numbers if there is no numbers in the sentence

Z1o~LtRi!x m^Od)e9Ms >A5R-e a R#eD A0N$d B"la*CK St7rI%pEd Bi&Rd;S

And there you go there is how I create my passwords. As to remembering them I am told I have a really good memory and chances are I do especially since I don't write them down. Also I aren't a systems administrator but the admin password is only about 6 characters (I have seen him type it in) long and is only a few letters and a few numbers.

Brendonny
Brendonny (929)
101758 2002-11-27 04:35:00 If u really wanted to break into a NT machine (Win2000/XP) it would be a lot easier to use this: pressf1.pcworld.co.nz


Cheers

Liam
nz_liam (845)
1