Rainbow tables
One very effective demonstration of the functioning and power of offline attacks is through a technique known as rainbow tables. This type of attack utilizes pre-computed hashes of all the different combinations of characters created using a given hashing method. In practice, the rainbow table will be created by the pentester, who will choose the parameters for creating the hashes. For example, parameters defining the minimum and maximum length of the password, as well as character sets and hashing types, will be defined. The result will be a table that can be used to find the correct password.
So how do we find the correct password using the table? Simple! We retrieve a hashed password from the local storage of the victim ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access