Tricks and Tips to Crack Password

There are different tips and tricks to crack password. Password cracking is the process or technique of Recovering Secret Passwords from Data that has been Stored or Transmitted by a Computer. A common approach is to repeatedly try Guesses for the Password.

Most Passwords can be Cracked by using following Techniques :

1) Hashing

Here we will refer the way Employed as a Hash and its Output as a Hashed Password. If a System uses a Reversible Function to Obscure Stored Passwords then Exploiting this Weakness can Recover even Well Chosen Passwords.

One example is the LM Hash that Microsoft Windows uses by Default to Store User Passwords that are Less than 15 Characters in Length. LM Hash Breaks the Password into two 7 character fields which are then hashed separately allowing each half to be attacked separately. Hash functions like SHA-512, SHA-1 and MD5 are considered Impossible to Invert when used Correctly.

2) Guessing

Many passwords can be Cracked by Guessing either by Humans or by Sophisticated Cracking Programs armed with Dictionaries (dictionary based) and the User’s Personal Information. Not Surprisingly, many Users choose Weak passwords, usually related to themselves in some way. Repeated research over some 40 years has demonstrated that around 40% of User chose Passwords are readily Guessable by Programs.

Examples of insecure choices include:

• blank (none).

• the word “password”, “passcode”, “admin” and their Derivatives.

• the User’s Name or Login Name.

• the Name of their significant other or another person (loved one).

• their Birthplace or Date of Birth.

• a Pet’s Name.

• a Dictionary Word in any Language.

• Automobile Licence Plate Number.

• a row of letters from a Standard Keyboard Layout (eg. asdf or qwertyuiop).

• a simple Modification of one of the Preceding, such as Suffixing a digit or Reversing the order of the letters.

3) Default Passwords

A Moderately high number of Local and Online Applications have inbuilt Default Passwords that have been configured by Programmers during development stages of software. There are lots of Applications running on the Internet on which Default Passwords are enabled.

So it is quite easy for an Attacker to Enter Default Password and gain Access to Sensitive Information. A list containing Default passwords of some of the most Popular Applications is available on the Internet. Always Disable or Change the Applications (both online and offline) Default Username Password Pairs.

4) Brute Force

If all other Techniques Failed, then Attackers uses Brute Force Password Cracking Technique. Here an Automatic Tool is used which Tries all Possible Combinations of available Keys on the Keyboard.

As soon as Correct Password is reached it Displays on the Screen. This Techniques takes extremely Long Time to Complete, but Password will surely Cracked. Long the Password is, Large is the Time taken to Brute Force it.

5) Phishing

This is the most Effective and Easily Executable Password Cracking Technique which is generally used to Crack the Passwords of Email Accounts and all those Accounts where Secret and Sensitive Private Information is stored by User such as Social Networking Websites, Matrimonial Websites, etc.

Phishing is a Technique in which the Attacker Creates the Fake Login Screen and send it to the Victim hoping that the Victim gets Fooled into Entering the Account's Username and Password. As soon as Victim Login, the Information reaches to the Attacker using Scripts or Online form Processors while the Victim is Redirected to Home Page of Email Service Provider. Never give reply to the Messages which are demanding for the Username or Password.

It is also possible to obtain the Passwords through other different methods such as Social Engineering, Wiretapping, Keystroke Logging, Login Spoofing, Dumpster Diving, Phishing, Shoulder Surfing, Timing Attack, Acoustic Crypt analysis  using a Trojan Horse or Virus, Identity Management System Attacks, Compromising Host Security, etc.

So these are simple Tricks and tips to crack password.