Password cracking assessment

Assess the strength of your password policy with expert password cracking services.

How does our password cracking assessment work?

Our password cracking assessment provides insight into the effectiveness of your organisation’s password policy by analysing password hashes from your Security Accounts Manager (SAM) file. By leveraging our advanced cracking machines, we evaluate password strength and provide detailed results, highlighting weak or compromised passwords.

This service helps you identify vulnerabilities in your current password policy, offering actionable recommendations to improve password security across your organisation.

Kraken password cracking tool assessing password strength during a password cracking assessment

Methodology

Secure transfer of SAM hash file

We ensure a secure, encrypted transfer of your SAM hash file using trusted methods like our secure file transfer on SmartView. This prevents interception or tampering during the transmission of sensitive data.

Password hash analysis

Once the SAM hash file is securely received, we initiate a thorough analysis using industry-standard cracking algorithms and techniques. Our high-performance cracking machines run through extensive wordlists, brute force, and dictionary attacks.

Multi-phase password cracking

We execute password cracking in multiple phases, starting with the simplest and most common password variations. We progressively move to more complex attacks, ensuring a comprehensive assessment of password strength.

Assessment of cracked passwords

Our team analyses the cracked passwords to identify trends, such as weak password patterns, reused passwords, and any non-compliance with organisational policies. This helps pinpoint the specific vulnerabilities in your current password policy.

Secure reporting

Once the assessment is complete, we compile a detailed report outlining the cracked passwords, the time to crack them, and insights into policy weaknesses. This report is securely delivered using encrypted channels to maintain data confidentiality.

Actionable recommendations

Based on the findings, we provide recommendations to enhance your password policy. This includes implementing more robust password requirements, adopting multi-factor authentication (MFA), and training employees on best practices for password management.

SmartView takes care of your reporting

Cognisys’ password cracking service provides clients with a detailed statistical report through the SmartView Portal, a centralised platform for efficiently managing projects and vulnerabilities. The report highlights key metrics such as cracked password percentages, common patterns, weak credentials, and time to crack.

Clients can track findings, identify security gaps, and assign remediation tasks directly within the platform. SmartView offers real-time insights and a streamlined workflow, enabling clients to reduce risks, strengthen password policies, and improve security posture.

Cognisys SmartView portal
source code review

Why choose Cognisys’ password cracking assessment?

We bring extensive expertise in password security and cryptography, leveraging years of experience to provide precise and thorough assessments. Using cutting-edge password-cracking technology and high-performance machines, we ensure comprehensive and efficient testing.

Our commitment to security is paramount, ensuring the safe transfer of your sensitive data and delivering encrypted, secure reports. Unlike generic solutions, our recommendations are tailored specifically to your organisation’s needs, offering actionable insights to strengthen your password policies. With a proven track record of helping organisations improve their security posture, we are dedicated to delivering results that enhance your long-term protection and success.

FAQs

To obtain the SAM file, you typically need administrative access to the system from which the file is being extracted. Instructions for extracting the SAM file vary depending on your operating system and environment. We can provide detailed guidance or support if needed.

In addition to the primary passwords in the SAM file, we may also analyse passwords associated with other user credentials, such as those stored in local security databases or related system files, depending on the scope of the assessment.

We do not provide the cracked password file to ensure the confidentiality and security of the data. Instead, we deliver a comprehensive report that highlights vulnerabilities, including details of any compromised passwords, along with actionable recommendations.

Hashes are stored securely using encryption and access controls to prevent unauthorised access. We implement industry-standard security measures to protect the integrity and confidentiality of the data during storage.

Hashes are stored only for the duration necessary to complete the assessment and generate the final report. Once the assessment is finalised, the hashes are purged from our system.

Hashes are purged from our servers immediately after the completion of the assessment and the delivery of the final report. We adhere to strict data retention policies to ensure all sensitive information is securely deleted in a timely manner.

Let’s make things happen

Fill in the form and one of our team will be in touch for a no-obligation discussion or quote regarding your requirements.

info@cognisys.co.uk
Leeds office

5 Park Place
Leeds
LS1 2RU

The Sharp Project
Thorpe Road
Manchester
M40 5BJ

LET’S TALK

Discover how we’ve helped leading organisations

RECENT UPDATES

Sekura ID team proudly receiving their award

CASE STUDY

Sekura.id: ISO 27001 in just 6 weeks through DTA

Learn about Sekura.id’s quick path to their ISO 27001 certification, helping them to foster trust with their clients.

The biggest cyber attacks and vulnerabilities from August 2024

NEWS

The biggest cyber attacks and vulnerabilities from August 2024

Insights and trends from recent cyber threats and vulnerabilities from August.

Two cyber security consultants discussing black box penetration testing

BLOG

Black box vs. grey box vs. white box penetration testing

In this blog, we will discuss the differences between black box, grey box, and white box penetration testing. We’ll break down what each method entails and help you determine which is best suited for your business needs.