5 ms·
>Password blacklists Assuming the external app is using AD auth. What product do you use to blacklist? Currently I just audit the passwords by dumping the hash
by chelmzy 8y ago
>Password blacklists
Assuming the external app is using AD auth. What product do you use to blacklist? Currently I just audit the passwords by dumping the hashes from the DC and running them against HIBP NTLM database.
- nextgens 8y agoCheck https://safepass.me https://safepass.me out (an active directory password filter)
- lucb1e 8y agoTo prevent disappointment for others that are interested: note that this is commercial and to get any sort of preview, you need to sign up and they emphasize that they want your corporate contact info... @nextgens: are you affiliated with them, or did you just have a good experience with their product and wanted to share it?
- ryanlol 8y agoAren't most people looking for something like this going to be BigCo employees?
- nextgens 8y agoI am affiliated and no, you don't need to sign-up to get a preview: We have a video that shows how to set it up and basic operation: https://safepass.me/demo-video https://safepass.me/demo-video We have a free "home-use" license: if your PC isn't hooked onto AD, it will just work. https://safepass.me/get-the-documentation https://safepass.me/get-the-documentation https://safepass.me/download https://safepass.me/download (the MSI)
- chelmzy 8y agoSweet. I'm going to get a demo from them. I've demoed Specops and nFront products but they were a tad out of my organization's price range.
- nextgens 8y agoLet me know how it goes; if our sales droids don't come up with something acceptable on their own, I am keen to understand why and will work something out for you.
- spydum 8y agoLast I saw black hills had a filter as well - but this is a problem. If companies have adopted Azure AD I believe they have some new options (sorry fuzzy on the details)