passwd security

[Birbone]

One of the admins from long ago had mentioned that they had tested the passswd file by using a website to reverse engineer the encrypted passwords to identify and correct any users who were using common names as passwords. That was several years ago, he's long gone, and I'm interested in running the same type test.

Does anyone know a good site to run this type of test?

-B

 

[uvguy]

You could try using "crack", which is an ok tool to check for weak passwords. You can download it at: ftp://ftp.cert.dfn.de/pub/tools/password/Crack/

 

[JasonDeckard]

I recommend John the Ripper, available at

http://www.openwall.com/john/