So You Cracked a Bunch of Passwords. Now What? - Chris Timmons

BSides Vancouver 2021 Hashcat is great at cracking passwords. PACK is great at analyzing those results and making your cracking run more efficient. Then what? Pentesting is all about the reporting and while PACK produces great statistics on character sets and complexity, it usually requires the tester to manually import that data into other tools to make it useable for the technical reviewers, while still making it visually appealing for the executives. I am debuting a tool which will fix this gap and help to automate some eye candy so your report can help produce positive results - like better password policies!