php - Performing a dictionary attack on my own site -
I want to attack a dictionary or, if it is easy to attack in the database directly with my hash password, find this To determine which users of my site are using a simple password.
While creating a password, I will apply some complexity rules, but I would like to be able to contact the words of those simple users, change your password.
Database MySQL MD5 is with hashed password The rest of the site is written in PHP.
My impression is that I need a dictionary file and they have an automated way to test each word against each user, but I have more than 1000 users to see and I I'm sure there are more than 10,000 potential words to test, so I do not know the best way to automate that type of thing.
Any help or guidance will be highly appreciated.
If MD5 is unsalted , then you might be weak or only marginally strong Users will be able to read passwords For example, in the plain text, by entering a hash in an online rainbow table:
No dictionary attacks are required.
If you are using unsaltered MD5 password in your application, then you should be beaten as a
Comments
Post a Comment