Proactive Password Auditor is a password security test application that is designed to allow systems administrators to identify and close security holes in their networks.

Proactive Password Auditor helps secure networks by executing an audit of account passwords, and exposing insecure account passwords. If it is possible to recover the password within a reasonable time, the password is considered insecure.

The software supports a few different methods of obtaining password hashes for further attack/audit: from dump files (generated by 3rd party tools like pwdump/pwdump2/pwdump3), Registry of local computer, binary Registry files (SAM and SYSTEM), memory of local computer, and memory of remote computers (Domain Controllers), including ones running Active Directory.

The product features brute-force and dictionary attacks on LM and NTLM password hashes, effectively optimized for speed, plus rainbow attack, that uses pre-computed hash tables that allow to find most passwords in minutes instead of days or weeks.

Here are some key features of "Proactive Password Auditor":

· Determine how secure your corporate network is
· Test the strength of passwords protecting user accounts
· Recover account passwords
· Perform attacks with brute force, by the dictionary, or with a mask from inside or outside of your network
· Recover up to 95% of passwords in just minutes from the inside with Rainbow attack

Requirements:

· About 4 megabytes of free space on hard disk

Limitations:

· 60 days trial