Weak password verification and cracking method and device

Abstract

The invention provides a weak password verification and cracking method and device; the method and device can realize central management and optimize a weak password dictionary, thus reducing weak password verification time, improving weak password discovering ability, and improving weak password cracking efficiency; the weak password verification method comprises the following steps: obtaining a use equipment UE password; if the obtained password is a cleartext password, determining whether the obtained password as a weak password or not according to a preset weak password definition; if the obtained password is a weak password and the password is not in the preset weak password dictionary, adding the password into the weak password dictionary.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a method and device for checking and cracking weak passwords. Background technique [0002] There are two existing weak password verification methods: [0003] 1. Obtain ciphertext passwords by using technology or manual means, and crack weak passwords based on the weak password dictionary; [0004] 2. Repeatedly try to log in the password of the account through the remote connection device. [0005] However, when method 1 is used to check weak passwords, there are several disadvantages in the following aspects: 1. Decentralization, weak password dictionaries are scattered in various discrete cracking tools, and unified management and efficient configuration cannot be performed. For example, weak password dictionaries When upgrading, it is impossible to effectively upgrade the entire network and update the latest weak password dictionary in a timely manner; 2. The manual...

AI Technical Summary

Problems solved by technology

[0005] However, when method 1 is used to check weak passwords, there are several disadvantages in the following aspects: 1. Decentralization, weak password dictionaries are scattered in various discrete cracking tools, and unified management and efficient configuration cannot be performed. For example, weak password dictionaries When upgrading, it is impossible to effectively upgrade the entire network and update the latest weak password dictionary in a timely manner; 2. The manual workload is heavy, and it is necessary to obtain the passwords on the device, weak password dictionary and analysis of cracking results one by one; 3. The efficiency is low and cannot be realized Periodic, network-wide weak password update and management

[0006] When using method 2 to check weak passwords, there are several disadvantages in the following aspects: 1. It is very easy to cause deadlock of the device configured with the account lock policy, thereby affecting the normal access of users; 2. Due to the impact on the device, it cannot Attempts to develop a very large dictionary of weak passwords often focus on the factory default account configuration and a small number of other weak passwords, and cannot more comprehensively discover other weak passwords that do not conform to the strong password policy

Brute force cracking is a brute force method. According to certain rules and algorithms, the passwords are calculated one by one until the real password is found. This leads to the process of brute force cracking taking a long time. When there are many account passwords to be cracked , it will take a long time, which will affect the work efficiency and become the bottleneck in the whole weak password offline verification process

[0009] To sum up, in the prior art, due to the decentralization of weak password dictionaries, some commonly used repeated passwords cannot be automatically included, resulting in a long time for weak password verification, low efficiency of weak password cracking, and insufficient ability to discover weak passwords.

Images