On Tue, Dec 7, 2010 at 3:42 PM, <olufemimogaji (at) gmail (dot) com [email concealed]> wrote:
> Hello All,
>
> I recently used a trial version of L0phtCrack to perform a password audit of the user accounts in my company's active directory. It worked great, revealing all the weak passwords that users had. The only problem is that it's a  trial version, and the full versions are just so expensive
>
> Does anyone know about an open source/free alternative that works ok, even if not as good as L0phtcrack. I'll truly appreciate any > > tips on this.

There was a good diary entry on SANS recently about this subject:

http://www.isc.sans.org/diary.html?date=2010-11-26

Might be some useful tidbits in there for you.

--
Paul Halliday
Ideation | Individualization | Learner | Achiever | Analytical
http://www.pintumbler.org

------------------------------------------------------------------------

This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------

[ reply ]