View Single Post
Old 02-14-2004, 09:05 AM  
borys
Confirmed User
 
Join Date: Oct 2002
Posts: 146
Quote:
Originally posted by nudecanada

Impossible. Verotel chooses the username/password for their customers, and it is an 8 digit numerical username and a 7 digit numerical password.

If you grab a password file, sure you have the username. But you would be running John the Ripper for a long time to match just one password to a username.
No, actually Verotel passes are extremely easy to decrypt in JTR beacause they're pure numerical. With standard DES encryption that's done in a few minutes. So when a hacker runs a mixed passfile of Verotel and other billers in JTR, he will get the Verotel passes first.
borys is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote