4 ms·
Hmm, combine that with a USB stick-like device and you could probably implement a brute-forcer that doesn't actually attempt most passwords, since key based edi
by tmzt 10y ago
Hmm, combine that with a USB stick-like device and you could probably implement a brute-forcer that doesn't actually attempt most passwords, since key based editing of the original password would probably work.
This of course assumes the entered password is still on the screen.
- eitland 10y agoDidn't think so far as a USB stick. That said, once you can leave a usb stick attached to targets computer I'd say all bets are off since at that point we can be reasonable secure that the target won't notice a USB or PS2 keyboard sniffer either, giving you plaintext passwords.
- tmzt 10y agoWas your original issue dealing with an already typed password? The stick would emulate a USB keyboard using something like a tiny and wouldn't be left attached. It would perform edits to the password and try to determine which charecters were special, the apply a simplified dictionary attack to the contiguous groupings of characters of the same class. The goal would be to reduce the space of the attempted guess. I don't see how it would be a practical attack though.
- qb45 10y agoIIRC Windows has pretty strong rate limiting on login attempts. You don't really need a USB stick to execute them as fast as possible.
- deleted 10y ago[deleted]
- deleted 10y ago[deleted]