OWASP Secure Password Project - Revision history

Kait Disney-Leugers at 20:02, 23 January 2014

2014-01-23T20:02:23Z

Kait Disney-Leugers at 18:45, 23 January 2014

2014-01-23T18:45:04Z

Kait Disney-Leugers at 02:12, 23 January 2014

2014-01-23T02:12:57Z

Jsokol at 22:22, 23 February 2011

2011-02-23T22:22:38Z

Paulo Coimbra at 20:53, 22 December 2010

2010-12-22T20:53:52Z

Sandra Paiva: Created page with '==== Main ==== ==== Project About ==== {{:Projects/OWASP Secure Password Project | Project About}} NOTOC [[Category:OWASP_Project|Secure Password Project]…'

2010-12-22T17:25:49Z

Created page with '==== Main ==== ==== Project About ==== {{:Projects/OWASP Secure Password Project | Project About}} __NOTOC__ <headertabs /> [[Category:OWASP_Project|Secure Password Project]…'

New page

==== Main ====

==== Project About ====
{{:Projects/OWASP Secure Password Project | Project About}}

__NOTOC__ <headertabs />

[[Category:OWASP_Project|Secure Password Project]] [[Category:OWASP_Document]] [[Category:OWASP_Alpha_Quality_Document|OWASP Alpha Quality Document]]

@@ Line 4: / Line 4: @@
 ! width="500" align="center" | <br>
 |-
-| align="right" | [[Image:OWASP Inactive Banner.jpg|800px| link=https://www.owasp.org/index.php/Category:OWASP_Project]]
+| align="right" | [[Image:OWASP Inactive Banner.jpg|800px| link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Inactive_Projects]]
 | align="right" |

@@ Line 1: / Line 1: @@
-[[Image:OWASP Inactive Banner.jpg|1155px]]
+{|
 ==== Main  ====
 This project will have a two pronged approach designed to put more nails in the single-factor method of authentication.  First, we will create an interactive portal where penetration testers are able to enter known information about the target.  This known information can then be broken down and converted to create a large downloadable dictionary list that has been customized to the target.  This list will be added to a comprehensive standard dictionary with the character conversions performed on that as well.  The result would be a large list of commonly used passwords, dictionary words, target specific passwords, and various derivitives of each which should cover the vast majority of passwords used today.

← Older revision		Revision as of 02:12, 23 January 2014
Line 1:		Line 1:
		+	[[Image:OWASP Inactive Banner.jpg\|1155px]]
	==== Main ====		==== Main ====
	This project will have a two pronged approach designed to put more nails in the single-factor method of authentication. First, we will create an interactive portal where penetration testers are able to enter known information about the target. This known information can then be broken down and converted to create a large downloadable dictionary list that has been customized to the target. This list will be added to a comprehensive standard dictionary with the character conversions performed on that as well. The result would be a large list of commonly used passwords, dictionary words, target specific passwords, and various derivitives of each which should cover the vast majority of passwords used today.		This project will have a two pronged approach designed to put more nails in the single-factor method of authentication. First, we will create an interactive portal where penetration testers are able to enter known information about the target. This known information can then be broken down and converted to create a large downloadable dictionary list that has been customized to the target. This list will be added to a comprehensive standard dictionary with the character conversions performed on that as well. The result would be a large list of commonly used passwords, dictionary words, target specific passwords, and various derivitives of each which should cover the vast majority of passwords used today.

← Older revision		Revision as of 22:22, 23 February 2011
Line 1:		Line 1:
	==== Main ====		==== Main ====
−	~~Hello Josh Sokol~~,~~<br>~~	+	This project will have a two pronged approach designed to put more nails in the single-factor method of authentication. First, we will create an interactive portal where penetration testers are able to enter known information about the target. This known information can then be broken down and converted to create a large downloadable dictionary list that has been customized to the target. This list will be added to a comprehensive standard dictionary with the character conversions performed on that as well. The result would be a large list of commonly used passwords, dictionary words, target specific passwords, and various derivitives of each which should cover the vast majority of passwords used today.
−	~~Please fill in here~~ as ~~you find best~~.~~<br>~~
−	~~Thanks~~,~~<br>~~
−	~~Paulo Coimbra~~, ~~Project Manager~~

		+	The second prong of our approach will be to capture the results of all data collected into a large database. This data will be hashed with common hashing methods to create what will become the world's largest rainbow tables. A user can provide us with a hash and we can do a lookup against these tables to search for matching entries. The goal here is to put a stop to unsalted password hashes for authentication.

		+	We likely have one final non-technical objective here which is to educate end-users on the proper creation of passwords. Maybe we even have some sort of password generator based on a phrase that somebody types in. If you are interested in contributing to the project, please contact the Project Leader, Josh Sokol, at josh dot sokol at owasp dot org.

← Older revision		Revision as of 20:53, 22 December 2010
Line 1:		Line 1:
	==== Main ====		==== Main ====
		+	Hello Josh Sokol,<br>
		+	Please fill in here as you find best.<br>
		+	Thanks,<br>
		+	Paulo Coimbra, Project Manager
		+
		+
		+

	==== Project About ====		==== Project About ====