OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
NFR Wizards Archives: Re: "Proactive" Password Checki

Re: "Proactive" Password Checking


Vin McLellan (vinshore.net)
Sat, 20 Nov 1999 01:08:02 -0500


        One more addition to this (temporarily) fading thread. I wanted to
offer a footnote about Simple Nomad's Pandora, which was today upgraded and
expanded.

        Pandora is to Novell's Netware Directory Services what Alec's Crack
has been to Unix, or (actually a little closer to;-) what L0phtcrack has
been to NT.

        "Pandora is a set of tools for hacking, intruding, and testing the
security and insecurity of Novell Netware. It works on versions 4 and 5.
Pandora consists of two distinct sets of programs -- an "online" version and
an"offline" version. Pandora Online is intended to be used for direct attack
against a live Netware 4 or 5 server. Pandora Offline is intended to be used
for password cracking after you have obtained copies of NDS."

        (The Nomad has a very dry sense of humor. He recently issued a
sardonic report criticizing IDS vendors for making their products too
accessible to hackers, too easy to set up and use, and too difficult to lock
up or disable.)

        Pandora v4 beta 2 -- freeware, open-source, available for various
Win boxes and Linux -- is (with a lot of other Novell white-hat hacker
stuff) available at: <http://www.nmrc.org/pandora/>

        Suerte,
                          _Vin



This archive was generated by hypermail 2.0b3 on Mon Nov 22 1999 - 06:17:11 CST