Researcher Unveils CrackQ, a New Password Cracking Manager

guest · Dec 5, 2019

Researcher Unveils CrackQ, a New Password Cracking Manager
December 4, 2019
https://www.securityweek.com/researcher-unveils-crackq-new-password-cracking-manager

Hashcat is billed as the world's fastest password cracker.
It has become an important tool for red teamers and pentesters analyzing the strength of customers' passwords.

At Black Hat Europe in London, UK, cybersecurity and managed security services provider Trustwave has announced the release of CrackQ (alpha version), available from GitHub. Developed over the last year by Trustwave principal security consultant Dan Turner, CrackQ, he says, is "an intuitive interface for Hashcat served by a REST API and a JavaScript front-end web application for ease of use."

The ability to add additional features remains. Turner has "a multitude of useful features planned for future releases", and also hopes the GitHub community will assist with future development.
Click to expand...

Turner has also created a password analysis library, called Pypal -- so named as a hat-tip to the command line analysis tool Pipal developed by independent security consultant and researcher Robin Wood. It provides largely similar analyses but delivers graphical results, and will on demand generate a report from the results of a cracking job.
Click to expand...

SpiderLabs: Introducing Password Cracking Manager: CrackQ

To clarify, Hashcat is a password cracking tool which utilizes the power of GPUs (Graphical Processing Units) for high-speed password cracking. In simple terms, password cracking is the process of matching a plain-text password to a cryptographic hash of that password. This is done by guessing the password, but at an incredibly fast rate. We're talking hundreds of billions of guesses per second in many cases.

CrackQ interfaces with Hashcat directly via the libhashcat library rather than using shell commands for execution. It uses the under-appreciated PyHashcat C bindings for this, which allows access to the library from Python. Aside from this, it's the only tool that uses SAML2 authentication, allowing you to offload credential management to an identity provider (Active Directory, Azure, etc.) and also to use Multi-Factor Authentication.
Click to expand...

Log in or Sign up

Researcher Unveils CrackQ, a New Password Cracking Manager

guest Guest

Log in or Sign up

Researcher Unveils CrackQ, a New Password Cracking Manager

guest Guest

Useful Searches