How do Password Hacking Programs Work

Password hacking programs work by using a number of different approaches to either decrypt or guess a working password.

Three of the most common approaches used by password hacking programs are:

• Known Ciphertext Attacks
• Dictionary Attacks
• Brute Force Attacks

The specific algorithm implemented by the password hacking program will depend upon the design of the password system. Each password hacking program is usually designed to defeat one specific type of password protection. Cisco router passwords, Zip passwords, or Microsoft Word passwords are some examples.

Known Ciphertext Attacks

A known ciphertext attack uses cryptanalysis to determine the plaintext password from the ciphertext password. If the password encryption algorithm has no known weaknesses, password hacking programs will use either a dictionary attack or a brute force attack to attempt to guess the password.

When a cryptosystem is exposed to known-ciphertext attack, implementers must be cautious to steer clear of conditions in which an enemy might be able to decrypt known-ciphertexts. This can be complex than what it looks like, as even incompletely known-ciphertexts can allow attacks. Known-ciphertext attacks, similar to other attacks, may be adaptive or non-adaptive. In a non-adaptive attack, the invader selects the ciphertext to decrypt beforehand, and does not use the ensuing plaintexts to notify their preference for more ciphertexts. In an adaptive known-ciphertext attack, the invaders make their ciphertext preferences adaptively, that is, depending on the outcome of former decryptions.

Dictionary Attacks

Dictionary attacks work by exploiting the fact that people often choose very simple passwords. A dictionary attack consists simply of trying every word in the dictionary as a possible password. Computer programs are developed which can automatically generate and try all the dictionary words.

More advanced dictionary attacks will try variations or combinations of common dictionary words. One popular password variation is to replace o's with zeros and i's with ones. A popular combination is to use two short words with a number in the middle, such as "all4one " or "girl4me."

Brute Force Attacks

If a dictionary attack fails to reveal a password, a brute force attack is still possible. A brute force attack consists simply of trying every possible password. Brute force attacks can take a long time, even for computers. The general rule is that the longer the possible password, the longer the brute force attack will take to run.