🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

🏠 Home 📰 News 🗂️ Usenet Search 🔑 Login 📝 Register
Thread View: sci.crypt
3 messages
[T] Back to Threads [V] Tree View [G] Group Articles
3 total messages Started by 0000;0000005648;4000;250;215;ecs... Sun, 06 Mar 1988 12:06
VMS password hacker
#4101
Author: 0000;0000005648;4000;250;215;ecs...
Date: Sun, 06 Mar 1988 12:06
19 lines
979 bytes 
Bunkersoft of Mountain View has a VMS password hacker
available for $30 (source code) from

Bunkersoft
PO Box 4436
Mountain View CA
94040-4436

The method used is a brute force attack. However, because of the
nature of the VMS password file, SYSPRV or CMKRNL is required for
a short window of time before running. I ran this program on my
installation at work; it found 35% of all passwords. 

Since HPWD is a proprietary DEC code, a batch file is given to
extract this information from LOGINOUT.EXE. I believe this program
is aimed at security managers etc.

ecs140w020@deneb.ucdavis.edu
ucdavis!deneb!ecs140w020
Re: VMS password *cracker* -- not "hacker"
#4108
Author: David Booth
Date: Mon, 07 Mar 1988 16:54
15 lines
905 bytes 
	From: ecs140w020@deneb.ucdavis.edu

	Bunkersoft of Mountain View has a VMS password hacker . . . .
	The method used is a brute force attack.  . . . .

Please, this is more appropriately called a password *cracker* --
analogous to a safe cracker.  Many of us have been hacking, i.e.
seat-of-the-pants programming -- not breaking into computers -- for
years.

		Thanks,
		David Booth
	Arpanet: booth@vax135.att.com
	UUCP: {harvard, seismo, ucbvax}!vax135!booth
Re: VMS password hacker
#4117
Author: Robert Cray
Date: Fri, 11 Mar 1988 05:58
16 lines
1219 bytes 
In article <1315@ucdavis.ucdavis.edu> ecs140w020@deneb.ucdavis.edu (0000;0000005648;4000;250;215;ecs140w) writes:
>Bunkersoft of Mountain View has a VMS password hacker
>available for $30 (source code) from
[...]
>Since HPWD is a proprietary DEC code, a batch file is given to
>extract this information from LOGINOUT.EXE. I believe this program
>is aimed at security managers etc.
>

Someone posted the source to lgi$hpwd on info-vax a while ago.  I'm suprised
DEC does not make available a call to do this, which would also do the same
accounting that goes on in loginout.  Can anyone whos looked at the code
comment on how secure it is?  I don't know macro-32, and have no intention
of learning it.  Quite annoying that so many vms programs are in macro.

						--robert
Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads