Penetration Test Tip: Add already guessed or cracked passwords to wordlist

When doing a penetration test, password attacks, while they lack the "sex appeal" of using the latest exploits in Metasploit to 0wn a b0x3r, are still disturbingly effective. Additionally, those same passwords are likely to be used on other machines, whether they be initial passwords for new/unused accounts or the same individual uses the same password on different systems.

Either way, once you guess a password (using enum.exe or the like) or crack a password from an encrypted hash (using John the Ripper or the like), add that password to the beginning of the master wordlist or dictionary list that you will use for the remainder of the penetration test, so that password is checked earlier rather than later.

Want to learn more? Check out:
SANS Security 560: Network Penetration Testing and Ethical Hacking

or

SANS Security 504: Hacker Techniques, Exploits and Incident Handling

-R

SANS Rocky Mountain 2009, July 7-13, in Denver, Colorado

SANS returns to the Mile High City for SANS Rocky Mountain 2009, July 7-13, in Denver, Colorado! Now more than ever, hands-on experience will set you apart from others in the field, so don't miss this opportunity to register today for the best hands-on computer security training money can buy!

We're offering these popular SANS courses emphasizing penetration testing, computer forensics, and certifications for managers and technical staff alike:

* Security 401: SANS Security Essentials Bootcamp Style (GSEC meets DoD8570 IAT II)
* Security 560: Network Penetration Testing and Ethical Hacking (GPEN)
* Management 512: SANS Security Leadership Essentials For Managers with Knowledge Compression(TM) (GSLC certification meets DoD 8570 IAM I, II, III)
* Management 414: SANS® +S™ Training Program for the CISSP® Certification Exam (CISSP cert meets DoD8570 IAM II, III)
* Security 617: Wireless Ethical Hacking, Penetration Testing, and Defense (GAWN)

IT Security Training: SANS Security 560 - Network Penetration Testing and Ethical Hacking, Denver, CO - starting Apr. 14, 2009

I am running a Mentor class of SANS Security 560 - Network Penetration Testing and Ethical Hacking here in Denver, starting April 14, 2009. To sign up, login to your portal account at http://portal.sans.org, then navigate to:

http://www.sans.org/mentor/details.php?nid=14819

for more details and to register. As a favor to me, if you do register, please enter MENTOR RECRUIT in the comments section. That way, SANS knows I marketed my own class :)

Hope to see you there!

-Rich