L0phtCrack

Description

L0phtCrack is a password auditing tool originally developed by the L0pht hacker collective, now open-sourced. It specializes in Windows password cracking using dictionary attacks, brute force, hybrid attacks, and rainbow tables. It can import password hashes directly from Active Directory and local SAM databases for enterprise-scale auditing.

Use Cases

• Enterprise Windows password policy auditing
• Active Directory password strength assessment
• Recovering Windows account passwords from SAM/AD hashes

Attack Phases

MITRE ATT&CK Techniques (3)