WIndows Domain Password DUMPER : Sekurlsa - mimikatz

http://carnal0wnage.attackresearch.com/2013/10/dumping-domains-worth-of-passwords-with.html?m=1

http://blog.gentilkiwi.com/securite/mimikatz/minidump

https://github.com/clymb3r/PowerShell/tree/master/Invoke-Mimikatz

(Read More..)

Redux: Are you sure SHA-1+salt is enough for passwords?

http://www.f-secure.com/weblog/archives/00002379.html

(Read More..)

How To Safely Store A Password

Use bcrypt. Use bcrypt. Use bcrypt. Use bcrypt. Use bcrypt. Use bcrypt. Use bcrypt. Use bcrypt. Use bcrypt.

Why Not {MD5, SHA1, SHA256, SHA512, SHA-3, etc}?

These are all general purpose hash functions, designed to calculate a digest of huge amounts of data in as short a time as possible. This means that they are fantastic for ensuring the integrity of data and utterly rubbish for storing passwords.

 http://codahale.com/how-to-safely-store-a-password/

(Read More..)

hashcat and hashcat-GUI

http://hashcat.net/forum/forum-16.html

(Read More..)