Posts

Showing posts with the label Password Auditing

Hash Spraying Attack

Hello folks, A couple of weeks ago I put together a Medium Story about the Hash Spraying Attack . Enjoy it!

Make-HtDigest - a tool to audit password files for WildFly / JBOSS / Apache

Hi there, I've created a tool called Make-HtDigest which is able to generate username + password combination based on a word-list for HTTP Digest Authentication. This can be used to compare output with real password files such as mgmt-users.properties from WildFly and .digest_pw from Apache. I hope it is useful and you enjoy it.