This is the README documentation for the Password Security Lab, produced and maintained by CodePath.org.
Want to jump into the lab? Navigate to the Part 0 Instructions to get started!
The Password Security Lab is designed to teach you about password security, cracking techniques, and the tools used in the industry. You'll gain hands-on experience with real-world scenarios and learn how passwords can be compromised. This will help you understand the importance of strong passwords and secure authentication methods.
- Run programs in a bash command line environment
- Understand password security concepts and best practices
- Use John the Ripper to crack password hashes
- Analyze and interpret the results of password cracking attempts
- Set up the lab environment using Docker.
- Learn: Password Cracking 101
- Apply: Crack a Small File (4 passwords)
- Challenge: Crack the Leaked Passwords (1000 passwords!)
In the provided Docker container, you will find all the necessary tools and dependencies pre-installed. This includes:
bash- A Unix shell and command language (this is how you will interact with the container)- John the Ripper (
john) - A password cracking tool, and the main focus of this lab mkpasswd- A utility for generating password hashesless- A text file viewerwget- A utility for downloading files from the webunzip- A utility for extracting compressed files
In addition, you may use built-in commands such as ls, cd, and cat to navigate and manipulate files within the container.