← Back to context

Comment by TheJoeMan

9 hours ago

I must say, if I was writing a password cracker, I probably would not think to actually start at "1".

I don't know, when I run a password cracker, I always start with a brute force pass of very short passwords. Doing so adds a negligible amount of time to the crack, and its surprising how many short passwords you'll find in systems that permit them.

You should start at "" or 0, not "1".

  • First time I pointed John the Ripper to a password file it immediately started beeping like crazy. Turns out default password was no password, and 70% of the accounts were unused. Those happy quaint 90s...