Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
Jan 2009 Free Giveaway Sponsor - Black Hat DC
Scooby Doo and the Crypto Caper - Answers and Winners
Daemon - A Contest Revealed
Hacking: The Art of Exploitation 2nd Edition
Nov 2008 Free Giveaway - Winners
Dec 2008 Free Giveaway Sponsor - SANS
Santa Claus is Hacking to Town
Plug-N-Play Network Hacking
Nov 2008 Free Giveaway Sponsor - CWNP
Daemon - A Contest Begins Now
It Happened One Friday - Answers and Winners
Daemon - A Contest
Scooby Doo and the Crypto Caper
MS Blue Hat Hackers Headline Chicago Security Con
The Pen Testing Perfect Storm Webcast Series with Skoudis, Wright, Johnson
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 18 guests and 2 members online
EH-Net Donations
Enter Amount:
$
CAD
USD
GBP
AUD
JPY
EUR
Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations
You are here:
Home
Forum
Ethical Hacking Discussions and Related Certifications
Network Pen Testing
questions
Ethical Hacker Community Forums
January 07, 2009, 10:22:54 PM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100!
www.chicagocon.com/content/view/103/51/
Home
Help
Calendar
Login
Register
Ethical Hacker Community Forums
>
Ethical Hacking Discussions and Related Certifications
>
Network Pen Testing
(Moderator:
don
) >
questions
Pages: [
1
]
Go Down
« previous
next »
Print
Author
Topic: questions (Read 1884 times)
0 Members and 1 Guest are viewing this topic.
roguewolftamer
Newbie
Offline
Posts: 3
questions
«
on:
December 02, 2007, 01:15:36 AM »
was curious on password security...lets say the average password on an email server or web site, how can you make the most secure password (tips that is)
basically I was curious cause my friend has a friend that is a "cracker" not a hacker (by term of course) and has hacked into my stuff to "check" on things while i was friends with my friend (we're not now)...but i was wanting to figure a way to make a more secure password and how long it would take for a good cracker/hacker to find out the password (and how they find out)
I was asking, because I want to start hacking my own computer to find out where my computer security lacks, and learn how to build a firewall and other security programs to help protect my computer (through practice of course)
Logged
sedated
Newbie
Offline
Posts: 37
Re: questions
«
Reply #1 on:
December 02, 2007, 03:23:44 AM »
Here is a descent tutorial on creating solid passwords.
http://www.microsoft.com/protect/yourself/password/create.mspx
Logged
sedated
Newbie
Offline
Posts: 37
Re: questions
«
Reply #2 on:
December 02, 2007, 03:33:20 AM »
Also i would like to add if you want to get a overview of how hackers operate and how to stop them for beginners i would recommend reading Hacking for dummies.It will help you understand computer security basics without getting over technical. Good luck on securing youre system
Logged
slimjim100
EH-Net Columnist
Sr. Member
Offline
Posts: 365
Re: questions
«
Reply #3 on:
December 02, 2007, 09:01:17 AM »
If your servers are Windows based I would recommend NTLM and at least 15 charters mix alpha-numeric with special chareters. This should slow down most cracker (98%) even if they have rainbow tables the chances they have tables to hit that many charters with Alpha-numeric-special is very low. Also it would take too long to bruteforce a 15 charter password and dictionarys will not cover words with mixed special charters.
Brian
Logged
CISSP, CCSE, CCNA, CCAI, Network+, Security+, JNCIA, & MCP
_Marshel_
Jr. Member
Offline
Posts: 61
Life Is too short to be someone else.
Re: questions
«
Reply #4 on:
December 02, 2007, 09:56:40 AM »
just like slinjim100 said,
and here is a guide for making strong password:
http://geodsoft.com/howto/password/
peace.
Logged
don
Editor-In-Chief
Administrator
Hero Member
Offline
Posts: 2434
Editor-In-Chief
Re: questions
«
Reply #5 on:
December 02, 2007, 10:18:48 AM »
To make it easier for you te remember long passwords, try using passphrases instead of passwords.
BTW - A sample chapter from
Hacking for Dummies
can be found here:
http://www.ethicalhacker.net/content/view/21/2/
Hope this helps,
Don
Logged
CISSP, MCSE, CEH, Security+ SME
Kev
Sr. Member
Offline
Posts: 359
Re: questions
«
Reply #6 on:
December 05, 2007, 12:50:58 PM »
Yes teaching paraphrases is a key to strong passwords in the work place. If part of my job is to help implement good security policies at a business, I always teach paraphrasing.
Logged
roguewolftamer
Newbie
Offline
Posts: 3
Re: questions
«
Reply #7 on:
December 06, 2007, 07:14:40 PM »
just so yall know as well...microsoft has a password evaluator (checker) on their website and it's fairly decent
its one of those evaluators that doesnt send anything out of that web site, and gives you either a weak, good, strong, or best rating in password protection
Logged
Pages: [
1
]
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Special Events
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009
=> News Items and General Discussion About EH-Net
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> Certification
===> The Charter Study Group - Pen Test
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
=====> CEH - Official Course Modules v4
=====> CEH - Official Course Modules v5
=====> CEH - Official Course Modules v6
===> CPTS - Certified Pen Testing Specialist
=====> CPTS - Official Course Modules v5
===> CPTE - Certified Pen Testing Expert
=====> CPTE - Official Course Modules v1
===> ECSA - EC-Council Certified Security Analyst
=====> ECSA - Official Course Modules v1.2
=====> ECSA / LPT - Official Course Modules v3
===> OSCP - Offensive Security Certified Professional
===> GPEN - GIAC Certified Penetration Tester
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
=====> CHFI - Official Course Modules v2
===> EnCE - EnCase® Certified Examiner
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Hardware
=> Malware
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Gates
=> Heffner
=> Hoffman
=> RichM
=> Murray
=> J. Peltier
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
Loading...
Sponsors
Polls
How many security events including conferences and training do you attend a year:
1 - 2
3 - 4
5 - 6
7+
None - But want to
None - Choose not to
Support EH-Net
Support EH-Net by
Buying all of your
Amazon items using
the search bar above.
Try CBT Nuggets Free!
Recent Forum Topics
Gates
: Oracle version module for metasploit
(2) by
BillV
CEH - Certified Ethical Hacker
: CEH is a scam
(17) by
BillV
Book Reviews
: [Article]-Mitnick - The Art Of Intrusion: Ch 1 - Hacking The Casinos For A Million Bu...
(5) by
jason
Links to cool sites.
: Free Computer Engineering Classes From Stanford
(3) by
jason
Oct 2008 - Scooby Doo and the Crypto Caper
: Skillz October 08 Winning Entry - Creative
(1) by
jason
Oct 2008 - Scooby Doo and the Crypto Caper
: [Article]-Scooby Doo and the Crypto Caper - Answers and Winners
(2) by
jason
News Items and General Discussion About EH-Net
: [Article]-Jan 2009 Free Giveaway Sponsor - Black Hat DC
(1) by
jason
Book Reviews
: Need a book suggestion!
(2) by
jason
News Items and General Discussion About EH-Net
: EH-Net Milestone - 2 Articles Cross 1 Million Page Views
(3) by
BillV
Other
: What kind of lab, machines you have for your security testing?
(12) by
charlottebandit
Wireless
: Wireless Pen Testing Cards
(5) by
charlottebandit
Oct 2008 - Scooby Doo and the Crypto Caper
: Skillz October 08 Winning Entry - Technical
(0) by
don
Malware
: Network Virus Problem
(9) by
RoleReversal
Wireless
: WUSB600N good usb ?
(2) by
nap191
News from the Outside World
: Is this acceptable?
(8) by
NickFnord
Other
: FBI code cracking challenge
(3) by
jimbob
Calendar Of Events
: RSA 2009
(0) by
don
Forensics
: Network Forensic tools/practice/techniques
(2) by
jimbob
Malware
: Autoplay when i try to open the drive.
(4) by
jimbob
Physical Security
: Magnetic stripe card spoofing
(4) by
jimbob
Malware
: THe website is Evil but what to do??
(1) by
jimbob
Other
: Insanity?
(3) by
jason
CEH - Certified Ethical Hacker
: Any Practice Environment for learning tool for CEH?
(15) by
don
Wireless
: a petri-dish bridge
(2) by
don
CEH - Certified Ethical Hacker
: TFTP Tranfer time out
(5) by
jason
Tools
: tool to trace users
(8) by
pseud0
Malware
: Malware Challenge 2008 Analysis
(0) by
blackazarro
Programming
: Python 3.0 Released
(0) by
don
Forensics
: SANS SIFT Forensic toolkit
(1) by
don
Links to cool sites.
: Omgili Hacking - Another Search Engine dedicated to Hacking Related Forums
(2) by
RoleReversal
Tools
: Insecure.org's 2006 Top 100 Security Tools List Released
(10) by
shednik
Malware
: Security Forecast for 2009
(4) by
shednik
Other
: Happy New Year!
(8) by
vijay2
CEH - Official Course Modules v6
: Community-built CEH Wiki
(2) by
yehg
Links to cool sites.
: 25C3 25th Chaos Communication Congress
(4) by
alan
Other
: Math Review
(3) by
don
Other
: will this get me anywhere?
(5) by
jason
Vote For EH-Net
progenic.com
binarica.com
technorati fave
Privacy Notice
for TDCC & All Properties
© 2009 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.