Waraxe IT Security Portal

slimjim100 · Valuable expert

Like LC5 but free and In my opion to has a better GUI. Works great with Rainbow tables! Ok I will start this makeshift article out with the place to find and download Cain & Able software (www.oxid.it). What is it you may ask? Well its like a Leatherman WAVE for your LAN. Cain & Abel is a password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kinds of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, decoding scrambled passwords, revealing password boxes, uncovering cached passwords and analyzing routing protocols. This software also lets you spoof your IP & MAC to make life hell for any admin trying to find you on the subnet, but I don?t recommend tiring this unless you have permission to do so.

Version 2.5 is faster and contains a lot of new features like APR (Arp Poison Routing) which enables sniffing on switched LANs by hijacking IP traffic of multiple hosts at the same time. The sniffer can also analyze encrypted protocols such as SSH-1 and HTTPS if used with APR and a Man-in-the-middle situation. Cain also ships routing protocols authentication monitors and routes extractors, crackers for all common hashing algorithms and for other various specific authentications, password calculators (Cisco PIX Hashes, RSA SecurID Tokens), decoders (Access Databases, Base64, Cisco Type-7, Enterprise Manager, Dialup, Remote Desktop) and some utilities like the Cisco Config Downloader/Uploader, the SiD-Scanner, the LSA Secrets Dumper, the Protected Storage Passwords Viewer, the NT Hash-Dumper (works with Syskey enabled), the Abel Remote Console, the MAC Scanner, the Promiscuous-Mode Scanner and the TCP/UDP/ICMP Traceroute + DNS Resolver + Netmask Discovery + WHOIS resolver (extract information from RIPE's Database). So now you wander what all this means. Well with free software that offers all of these utilities in one application it can be a life saver if you lost a password on a system or if you?re a freelance consultant that has to fix poorly maintained networks. As always I do not endorse any mis-use of software but I do endorse learning on a safe in the effort that it will help you to secure your own network.

***here is the link to my review with screen shoots***
http://www.middlegeorgia.org/default.asp?id=9&mnu=9