password audit - PaperMtn

Lil Pwny

Generating a Rich Custom Wordlist to use with Lil Pwny

In this post I show how you can use some of the same tools that attackers use to generate a tailored custom password list to use with Lil Pwny, and find those risky passwords before they do. As the number of data breaches continue to rise, safeguarding your Active Directory

Lil Pwny

Lil Pwny Rides Again: Streamline Your Active Directory Password Audits with the New 3.2.0 Update

I'm excited to announce the release of Lil Pwny 3.2.0, featuring powerful new enhancements to the Active Directory password auditing tool. This update brings significant improvements and new features. Following NIST's recommendation in Section 5.1.1.2 of their Digital Identity Guidelines, Lil

Lil Pwny

Using Lil Pwny - Part 2: Running Lil Pwny and Assessing the Output

💡This post is partially out of date, and should be read in combination with the version 2.0.0 release notes Now that we have our data from Active Directory, it is time to use Lil Pwny to audit the passwords. Getting Ready Installing Lil Pwny is simple from PyPI:

Lil Pwny

Using Lil Pwny - Part 1: Exporting Passwords from Active Directory

The first step in auditing passwords using Lil Pwny is to recover the passwords from Active Directory. Passwords in a Windows Domain Before we look at how to recover passwords, it is useful to know how Windows handles and stores passwords in general. Windows uses the NTLM (New Technology LAN

Lil Pwny

Lil Pwny - Auditing Active Directory passwords using multiprocessing in Python

💡This post is partially out of date, and should be read in combination with the version 2.0.0 release notes About Lil Pwny is an application I created to check passwords from Active Directory against the list of compromised passwords from Have I Been Pwned, the collection of real