Tuesday, October 27, 2009

Error in libxml2.dll

So the other night I was having a small issue loading the Ruby gem Mechanize into a program I was working on. I kept getting this rather cumbersome error "The procedure entry point XXXXXXX could not be located in the dynamic link library libxml.dll"
I investigated for a while but found no truly helpful documentation drawing to a solution for this rather upsetting issue. Then I came across this site which is all about the creation of the libxml2 library. From here you can easily find and download the latest version of this library. Once I had the library I simply went into C:\Windows and quickly located the old corrupted version of libxml2. When I first attempted to delete the file I was of course prompted with an error that the file could not be deleted because it was in use. After a quick change of the file name I deleted the old library, I then cut and pasted my way to sanity. Quite simple, YET I figured one day someone just might find this useful ;)

Monday, October 26, 2009

DirSnatch _v2.0

Alright so I know I have not posted anything in a while, my bad guys. So this weekend my brother (cktricky) and I worked on our program DirSnatch. It has a pretty nice GUI now and I would have to say I enjoy coding in wxruby. Everything so far seems to be functioning well. If you do find anything wrong then please give us a heads up and we will begin fixing any issues. Feedback and comments are much apriciated as well. Up next we will be working on QwickR. :)

Thursday, September 10, 2009

l0phtCrack

The makers of L0phtCrack are back at it again. Just a short while ago L0phtCrack 6 came out. I was a little skeptical wondering how this new tool would operate. I thought to myself about how the Rainbow Tables Project is completely changing the idea of password strength. Then I saw that L0phtCrack now supports pre-computed hash tables. While there are many benefits to pre-computed hash tables there is also the fact of how large these files must be, and how time consuming they are to create. That is why I am glad to say that L0phtCrack 6 also supports good old Dictionary/Hybrid and Straight Brute Force. After toying around with this tool (by that I mean spending all of Labor Day weekend playing with it) I found that this is a very well rounded program despite a few small bugs that make the tool painful if it is new to you.
The main thing that I had to consider while pondering on this tool is the lack of competitors. I would say there are very few actual password CRACKING tools. That being said I can only think of one that is even close to the same level as L0phtCrack and that would be OphCrack. OphCrack is a tool that uses Rainbow Tables and.....Rainbow Tables. Pretty simple right? Well not really. The reason they are so good is because they actually create and sale their OWN Rainbow Tables.
While I am on the subject of password auditing though I would like to bring up the matter of where did it go? I know there are plenty of tools to not only reset but also bypass password authentication yet those are mostly for physical access to the machine. It is very rare that I hear about anyone speaking of the actual importance of a complex password. I mean please correct me if I am wrong but this is still an issue, yet no one seems to really pay much attention to this form of security anymore.