Cracking password hashes can be tedious and can often require literally an infinite amount of time. However, using the power of statistical modeling, it is possible to dramatically cut the amount of time needed to compromise password hashes. This talk establishes an easy to understand methodology for password cracking, which incorporates new research and will also demonstrate a new tool created to help automatically process password hashes through this methodology. This is a follow up talk from my research presentation "Is Your Crack-a-Lackin," and will discuss the statistical password research from that as well as its utilization in a tool.

Julian is a security engineer with the elite penetration testing company, Praetorian in Austin, TX. Julian specializes in social engineering activities and network penetration. Julian comes from a business background and focuses on handling penetration tests with a business oriented prospective so that he can communicate effectively to clients any facet of the assessment. Julian also avidly attempts to foster innovation in security such as his novel ideas in the realms of password cracking and stenography which have been presented publicly. Julian is a Offensive Security Certified Professional (OSCP) and Cisco Certified Network Associate (CCNA).

Back to HouSecCon 2015 video list