full-disclosure - Attacking Password Recovery Facilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <6905b1570707060201v7bb54063x8182ce0050815c4f@mail.gmail.com>
Date: Fri, 6 Jul 2007 10:01:33 +0100
From: "pdp (architect)" <pdp.gnucitizen@...glemail.com>
To: full-disclosure@...ts.grok.org.uk, "WASC Forum" <websecurity@...appsec.org>,
	"webappsec @OWASP" <webappsec@...ts.owasp.org>
Subject: Attacking Password Recovery Facilities

http://www.gnucitizen.org/blog/attacking-password-recovery-facilities

this is a small article from ap (aka pagvac) on how to attack password
recovery facilities. this post just briefly scratches the surface and
I am sure that he will come up with more stuff in the near future.
Nevertheless, he brought some interesting points. Hava a look. Cheers.

-- 
pdp (architect) | petko d. petkov
http://www.gnucitizen.org

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/