Pwdlyser

Pwdlyser 公共发布的新仓库 Pwdlyser P assw ord -Analyser 是一款多功能分析工具，旨在为安全专业人员以及致力于提升安全态势的组织提供便捷的密码审查与分析能力，可针对 Active Directory 域账户、数据库等中的密码进行轻松审核。其次，它应能被安全顾问和渗透测试人员用于识别和定位关键账户密码（如域管理员）、最常见的 Hashcat 字符密码掩码，并输出列表中常见密码的估计熵值。...

A week in security (Dec 20 – 26)

Last week on Malwarebytes Labs: When a deepfake “empire” continues to grow Everything you always wanted to know about NFTs but were too afraid to ask: Lock and Code S02E24 Police forces pipe 225 million pwned passwords into ‘Have I Been Pwned?’ Logistics giant warns of scams following ransomware...

Euros Football Fever Nets Dumb Passwords

The European soccer championship a.k.a. the Euros is stoking maximum football fever, which has slopped over into easy-to-crack passwords. Such as, say, “football.” That password is of course easy as pie to crack via a dictionary attack – a type of brute-force attack that involves trying thousands...

Revamp of ‘Pwned Passwords’ Boosts Privacy and Size of Database

Researcher Troy Hunt announced a major revamp of his Pwned Passwords tool that includes more passwords, added features and tightened privacy for organizations who want to check if their in-use passwords can easily be cracked. In V2 of Pwned Passwords, launched last week, Hunt updated his password...