-1

I would like to list the username of the users which do not have a strong password in a LAN. How can I do it?

I do not want to force the password of the users, I want to force the users that have no password or not strong one to change it and use a stronger one.

closed as unclear what you're asking by Rui F Ribeiro, countermode, HalosGhost, techraf, don_crissti Oct 25 '16 at 22:50

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • I do not wan to force the password of the user. – aurelien Oct 25 '16 at 20:18
  • 1
    Also do look into "Intel vs Randal Schwartz" before getting too deep into password crackers. – thrig Oct 25 '16 at 20:30
  • 1
    "In a LAN" isn't very specific, but in general passwords are hashed, there's no way to determine if they're "strong" or not without cracking them – Michael Mrozek Oct 25 '16 at 21:13
  • Ok, Thank you @MichaelMrozek for your lights – aurelien Oct 26 '16 at 18:23
2

Assuming you have access to the password database, something like John the Ripper could help you. Though it'd be easier to force a sufficient amount of "strongness" when the users set their passwords.

1

You'll want to talk to John.

http://www.openwall.com/john/

Can be used in conjunction with hydra.

Not the answer you're looking for? Browse other questions tagged or ask your own question.