# Module 6.0: Password labs

1. download the TCO book about passwords to your own mac so you can complete the homework
2. install homebrew on your mac: module 6.1
3. follow the instructions in module 6.1 to install the brew commands on your laptop
4. test these out by typing brew update and pwgen-you should see a password generator
5. in class, we will be using older pimacs as well as your personal macs, once you have installed homebrew

<div id="bkmrk-password-quality-che"><span style="font-weight: bold;">Password quality checks: 6.2</span></div><div id="bkmrk-start-with-cracklib-">

1. start with cracklib-check (see module 6.2)
2. move on to pwgen and apg
3. create at least 5 passwords and record them from each, we'll use them next

<div><div><div><span style="font-weight: bold;">Entropy: 6.3</span></div></div><div>

1. follow the steps on module 6.4 to create the python script entropy\_calc.py
2. test the program by: python3 entropy\_calc.py
3. using the password checker program entropy\_cal.py check each of your 5 passwords
4. repeat with simpler passwords
5. repeat with the zxcvbn\_demo.py script or the entropy\_demo.py script if you have it
6. from the homework, why do we care about entropy?

</div></div><div><span style="font-weight: bold;">Hashing: 6.5</span></div></div><div id="bkmrk-try-out-hashing-usin">

1. try out hashing using this site: [https://emn178.github.io/online-tools/sha256.html](https://emn178.github.io/online-tools/sha256.html)
2. create hashes from your 5 passwords above
3. hide these in a file called hashes.txt
4. challenge your friends to find that file for later
5. follow the tips on module 6.5 to install hashcat if not installed already
6. follow 6.5 to create a small wordlist with your original 5 passwords along with papaya77
7. follow 6.5 to run hashcat and decode the hashes
8. if you had a much bigger wordlist, would you be able to attack a new machine?f
9. follow 6.5 to use hydra to attack 10.14.88.83
10. explain why the hash could not be decoded

</div><div id="bkmrk--1"><div>  
</div></div>---

<small>Migrated from Apple Server Wiki. Original page ID: h2U3\_495</small>