Ahmad Muammar W. K.http://google.com/search?q=y3dips

http://google.com/search?q=y3dips

DetailsPassword

Deal with Cracking

Passive ActionSimulationDiscussion

http://google.com/search?q=y3dips

PasswordWhy ?“Kata Kunci”

diansastro090382mickey

http://google.com/search?q=y3dips

PasswordPanjang Minimum 6 KarakterTidak Ber-Makna (bukan nama pacar, bukan tanggal lahir)Kombinasi Huruf, Angka dan karakter lainUsernameX PasswordPerlu Pengamanan extra

http://google.com/search?q=y3dips

PasswordPassPhrase ?

D1an545TR04m1nkExtravaganz4KaptenTSUBASA

Ahmad Muammar W. K.http://google.com/search?q=y3dips

http://google.com/search?q=y3dips

Simulation !Cracking windows Password

via linuxvia windows

Cracking Linux PasswordRemote Cracking

http://google.com/search?q=y3dips

Cracking windows PasswordTools

Bkhive + sampdump2 (getting hash)Pwdump2 (getting hash)

John the ripper for cracking the hashDatabase password : SAM file , system

http://google.com/search?q=y3dips

Cracking Linux PasswordTools

Unshadow

John the ripper for cracking the hashDatabase password : passwd, shadow

http://google.com/search?q=y3dips

Remote CrackingBruteforcing via networkSlow speedBrutus, hydra, ssh crack, tftpd-bruteforce

Ahmad Muammar W. K.http://google.com/search?q=y3dips

http://google.com/search?q=y3dips

Passive Action?Browser Ability?KeyloggerApplication/Engine HoleInsecure protocol/line

Ahmad Muammar W. K.http://google.com/search?q=y3dips

http://google.com/search?q=y3dips

Browser AbilityWand/Remember PasswordHistoryCache abilityetc

Ahmad Muammar W. K.http://google.com/search?q=y3dips

http://google.com/search?q=y3dips

KeyloggerMalicious ProgramKey stroke Passive tools

Ahmad Muammar W. K.http://google.com/search?q=y3dips

http://google.com/search?q=y3dips

Bugs in ApplicationApplication/Engine Vulnerability Information disclosuree.g: phpnuke, postnuke, mambo

Ahmad Muammar W. K.http://google.com/search?q=y3dips

http://google.com/search?q=y3dips

Insecure LinePlaintext protocol ( http, tcp, smtp )Plaintext DataSniff it & collect it ( ethereal, ettercap, dsniff, etc)

http:// clear text

Ahmad Muammar W. K.http://google.com/search?q=y3dips

http://google.com/search?q=y3dips

SurviveUsing a better pass phraseUsing secure line/protocolEncryption

Securing tools (firewall, antivirus)Update infoE.t.c

Ahmad Muammar W. K.http://google.com/search?q=y3dips