Printable View
:) Hello, I am just wondering if it is possible to scan my computer from my computer. What i mean is can i use nmap angry ip scanner, and scan my computer from the same computer? Also is there a way to use brute force to check my password strength before logging in? maybe if they were on disk. thankyou
Yes you can use nmap on yourself. I've always had problems using 127.0.0.1 or localhost, I've always used my network address. And your password strength can be judged by looking at it. Is is a single word? Is it multiple words? Is it random? Does is include caps and lower caps? Extra characters like !@#$? The crazier your pass, the longer it will take a cracker to guess it.
Also try retina from eeye.
:) That was fast thanks. I have like a 17 digit pass with upper and lower case and also
extra characters @#%$&_~ I would like to test it but dont know how to.
I would use John the ripper for that.
http://www.openwall.com/john/
Before you try to use it look over the Read Me file
According to this, youve got nothing to worry about then when it comes to your password.
http://lastbit.com/pswcalc.asp
I don't think that you can perform a meaningful test on that sort of password. It is too long and too complicated.Quote:
I have like a 17 digit pass with upper and lower case and also extra characters @#%$&_~ I would like to test it but dont know how to.
Certainly, a "dictionary" attack would fail, and 17 characters would take a very long time to brute force. In brute forcing, the length of a password is the critical factor, all else being equal.
I would suggest that if you really want to test it, you change the password to something simple like dcba, to prove that the tool works. Then change it back to your real password, and cancel the job when you get bored.
Cheers
Yes you can use NMap to scan yourself you can use any IP scanner or port scanner on yourself and why is the name of your post Xbox something...
jr05linux: If I'm seeing what you aren't, the name of the thread say's "How do i scan my box". Anyway's I'll second using Retina, it's one of my favorite Network Vulnerability scanner's and I use it with all my client's who want to know if they have a "secure box" or not. It's probably one of the best on the Window's market (aside from NMap, but that's more of a port scanner). Definitely check that out.
I don't know what OS t00tYfrUitY is using, but "most" OS have a set number for the default password. Am I wrong to state that if you go over that number, then the rest is garbage? If someone wants to break your password and the limit on the password is 7, then adding 10 more numbers(characters etc.) is not going to make it any harder? Would not the cracking program stop when it found the password and not keep trying all of the extra garbage?
Well,
1. The default password is set by the supplier, and could be anything. Not neccesarily the maximum. Generally much smaller and easy to remember.
2. Several things can happen if you exceed the maximum password length:
A. Nothing............it just stops.
B. It may start overwriting the first part of the pass with excess characters.
C. You get an error message.
D. It shows the extra characters, but does not recognise them.
My XP box has a 19 character pass, and I think that it will go higher.
If your OS will only accept 7 characters I would you format the HDD and install a proper one (OS):)
Please don't get confused with the "pseudo-passwords" that are in "home" versions of Windows, they are NOT a security measure, they are just there to make it easier to cater for multiple users of the same stand alone machine.
Cheers
nihil, I was talking about the size of the default password, not the password itself? :cool:Quote:
1. The default password is set by the supplier, and could be anything. Not neccesarily the maximum. Generally much smaller and easy to remember.
2. Yes certain things can happen if you exceed the set number, and some OS's can be changed, but I still don't see what will happen if you exceed the set number(concerning a cracking program)? You have to know what the number is(and change it if necessary) to take full advantage of it.
And yes, the OS's that I use do accept higher numbers, and are proper ones? :DQuote:
If your OS will only accept 7 characters I would you format the HDD and install a proper one (OS)
:confused: I've nearly forgotten my 30 odd digit password a couple of times :what:
Devpon,
What I was saying is that the password is in the regular location (so the capacity is the regular size) but the "default" is something set by the manufacturer, and may be blank or a setting like "password" or whatever, even though it may be in a 30 digit field. A good system will make you set the password or change it, but this was not always the case. I can remember getting into IBM S\38s using the default System Security Officer's password :eek:
OK, regarding a cracking program, the first thing you need is the password field, so you will know how big it is "for real".
Then it works like I said, you will either have the password overwritten with the extra characters, starting at the front, or they will be ignored. In either case the BF cracker will look at what exactly is in the password field, and allows access.
I can remember cracking tools that only worked on 8 digits, and that wasn't that long ago..............so if you had a longer pass, the cracking tool wouldn't work...........hence the need to educate users on secure passwords ;)
Cheers
Sure you can just download a portscanner. Then scan the localhost or 127.0.0.1. http://www.blackcode.com has some pretty nice port scanners. But NMap is the best ive ever used :).