Module 6.0: Password labs
- download the TCO book about passwords to your own mac so you can complete the homework
- install homebrew on your mac: module 6.1
- follow the instructions in module 6.1 to install the brew commands on your laptop
- test these out by typing brew update and pwgen-you should see a password generator
- in class, we will be using older pimacs as well as your personal macs, once you have installed homebrew
Password quality checks: 6.2
- start with cracklib-check (see module 6.2)
- move on to pwgen and apg
- create at least 5 passwords and record them from each, we'll use them next
Entropy: 6.3
- follow the steps on module 6.4 to create the python script entropy_calc.py
- test the program by: python3 entropy_calc.py
- using the password checker program entropy_cal.py check each of your 5 passwords
- repeat with simpler passwords
- repeat with the zxcvbn_demo.py script or the entropy_demo.py script if you have it
- from the homework, why do we care about entropy?
Hashing: 6.5
- try out hashing using this site: https://emn178.github.io/online-tools/sha256.html
- create hashes from your 5 passwords above
- hide these in a file called hashes.txt
- challenge your friends to find that file for later
- follow the tips on module 6.5 to install hashcat if not installed already
- follow 6.5 to create a small wordlist with your original 5 passwords along with papaya77
- follow 6.5 to run hashcat and decode the hashes
- if you had a much bigger wordlist, would you be able to attack a new machine?f
- follow 6.5 to use hydra to attack 10.14.88.83
- explain why the hash could not be decoded
Migrated from Apple Server Wiki. Original page ID: h2U3_495