ProactivePassword Auditor
Examine Network Security
Proactive Password Auditor helps network administrators to examine the security of their
networks by executing an audit of account passwords. By exposing insecure passwords,
Proactive Password Auditor demonstrates how secure a network is under attack.
How Secure Is Your Network?

Feature highlights:
Uses password cacheSupports indexed rainbowtables



Determines how secure
your corporate network is

Tests the strength ofpasswords protecting useraccounts

Recovers accountpasswords

Performs attacks withbrute force, by thedictionary, or with a maskfrom inside or outside ofyour network

Recovers up to 95% ofpasswords in just minutes
from the inside withRainbow attack

A single weak password exposes your entire network to an external threat. Password-hacking
is one of the most critical and commonly exploited network security threats. Network users
employ short and simple passwords that are easy to remember, but are also easy to break.
They often use repeating characters, simple words and names for easier memorizing. Making
them use computer-generated passwords that consist of random characters will only make theproblem more severe, as the users will write the passwords down on the proverbial yellowstickers. There is more information available on the issue in the Elcomsoft whitepaper
Proactive Is Better than Reactive: Testing Password Safety – a Key to Securing a Corporate
Network.
Network administrators are also part of the problem, as they may forget purging terminatedemployees, forcing people to change passwords often, or locking out the users after a certain
number of failed login attempts.
Network Security Policies
Weak passwords are easy to break, while complex passwords are difficult to memorize.
Having an elaborate security policy is the only way to ensure the security of your network.
Force network users to change passwords regularly, and audit the network after everychange. Did it take Proactive Password Auditor 30 days to break a password when you
performed the last audit? Then examine your network at least once a month to ensureongoing security.
Network Security Audit
Proactive Password Auditor examines the security of your network by attempting to break intothe network. It tries common attacks on the account passwords in an attempt to recover apassword of a user account.
Proactive Password Auditor allows carrying out a password audit within a limited period oftime. If it is possible for Proactive Password Auditor to recover a password within a reasonable
time, the entire network cannot be considered secure.
Recover Account Passwords
Network administrators can use Proactive Password Auditor to recover Windows accountpasswords, too. Proactive Password Auditor analyzes user password hashes and recovers
plain-text passwords, allowing accessing their accounts, including EFS-encrypted files andfolders.

Supported types of attacks are reflected in the screenshot below:

More info about Proactive Password Auditor at:
http://www.elcomsoft.com/PPA.html
System requirements for PPASupported Operating Systems: Windows 2000, Windows 7 (32 bit), Windows 7 (64 bit), Windows Server 2003/2008, Windows Vista (32 bit), Windows Vista (64 bit), Windows XPAbout 6 MB of free space on hard diskAdministrator privileges are required

Types of Attacks
Proactive Password Auditor uses several basic methods for testing and recovering passwords, including brute force attack,mask attack, dictionary search, and Rainbow table attack. The Rainbow attack is particularly effective, as it uses pre-computed
hash tables that allow finding up to 95% of passwords in just minutes instead of days or weeks. Fortunately, the Rainbow attack
cannot be performed from outside of your network! You’ll need either administrative access or a dump file exported by Elcomsoft System Recovery.
Compatibility with Other Elcomsoft Products
Proactive Password Auditor supports off-line recovery of account passwords by analyzing dump files saved by Elcomsoft System Recovery, local Registry, binary Registry files (SAM and SYSTEM), memory of the local computer, and memory of remotecomputers (Domain Controllers), including ones running Active Directory.
The off-line recovery speed can be greatly enhanced when using Elcomsoft Distributed Password Recovery. Thanks to the patented GPU acceleration technology available in Elcomsoft Distributed Password Recovery, the recovery using a single PC isup to 50 times faster as compared to CPU-only mode and other password-recovery applications. Adding more computers increases the recovery speed linearly with zero scalability overhead.

About ElcomSoft Co. Ltd.
ElcomSoft Co.Ltd. is a global industry-acknowledged expert in computer and mobile forensics providing tools, training, andconsulting services to law enforcement, military, and intelligence agencies in criminal investigations. ElcomSoft has products thatare affordable to individual consumers, and enterprise-grade products optimized for recovering passwords with clusters ofnetwork-connected workstations. The company’s zero overhead algorithms ensure linear performance growth in even the largestnetworks.
GPU acceleration for faster processing
ElcomSoft pioneered many password recovery and information security technologies and algorithms and now patented
technological innovations set industry standards. The company has five US patents granted, and several pending. Ourtrademarks and copyrights are duly registered and protected. ElcomSoft’s patented innovations include GPU acceleration
allowing to perform password recovery up to 20 times faster compared to Intel top of the line quad-core CPUs by using consumer- grade video cards with AMD or NVIDIA chips. Thunder Tables® , yet another patented technology, ensures guaranteed
recovery of password-protected Microsoft Word and Microsoft Excel documents in just seconds instead of hours or days.
Our customers are our most valuable assets
ElcomSoft products are used by hundreds of thousands of happy customers, with many clients returning to purchase otherproducts from us. We serve government and commercial organizations, including security departments, IT security audit
departments and independent security professionals, as well as help desks of major corporations.
Our solutions are used by most of the Fortune 500 corporations, multiple branches of the military all over the world, governments,
forensics and intelligence services in many countries including FBI, NSA/CSS, The Federal Security Service of the RussianFederation (FSB), as well as all major accounting companies. ElcomSoft supplies law enforcement and criminal investigation
departments with password recovery tools, and helps legal authorities fight cyber-crime by providing consulting and sharing its
technological expertise in information security.
Acknowledged by computer security experts
ElcomSoft products have become de-facto industry-standard, are studied in training sessions, and are covered in textbooks. Ourproducts are part of the Certified Ethical Hacker initiative, a program that certifies the skills of security officers and consultants,auditors, site administrators, and professionals concerned about information security and the integrity of the network
infrastructure.
ElcomSoft is an acknowledged expert in the password / system recovery and forensics market. The company’s technologicalachievements and opinion leadership is quoted in many authoritative publications. For example: "Microsoft Encyclopedia ofSecurity", "The art of deception" (by Kevin Mitnick), "IT Auditing: Using Controls to Protect Information Assets" (by Chris Davis),"Hacking exposed" (by Stuart McClure). Here is an incomplete list of other publications:Hacking For Dummies by Kevin BeaverPractical Intrusion Analysis: Prevention and Detection for the Twenty-First Century by Ryan TrostFISMA Certification & Accreditation Handbook by L. Taylor

Computer Network Security: Theory and Practice by Jie Wang

A+ Certification Study Guide, Sixth Edition by Jane Holcombe, Charles HolcombeInvestigating Digital Crime by Robin P. BryantSecurity Engineering: A Guide to Building Dependable Distributed Systems by Ross J. Anderson

Network Know-How: An Essential Guide for the Accidental Admin by John Ross



Hacking Exposed: Network Security Secrets and Solutions, Sixth Edition by Stuart McClure, Joel Scambray, GeorgeKurtz

ElcomSoft is Microsoft® Gold Independent Software Vendor, Intel® Software Premier Elite Partner, member of Russian
Cryptology Association (RCA) and Computer Security Institute. ElcomSoft is registered with DUNS and CCR/CAGE.

Contacts

Find a reseller around the world

Faxes:
US, toll-free: +1 866 448-2703
United Kingdom: +44 870 831-2983
Germany: +49 18054820050734
E-Mail: sales@elcomsoft.com
Internet: http://www.elcomsoft.com/contacts.html

To find an ElcomSoft authorized reseller, check
http://www.elcomsoft.com/partners/partner_list.html

Government & Commercial Registrations
D-U-N-S® Number: 534889845
NATO Commercial and Government Entity (NCAGE,also CAGE) Code: SCM11
Central Contractor Registration (CCR): Visit
www.bpn.gov and enter our NCAGE or DUNS number.

Pricing & ordering info
To check pricing and place an order please visit
http://www.elcomsoft.com/purchase/

Press releases
http://www.elcomsoft.com/pr.html#pr
White papers
http://www.elcomsoft.com/pr.html#wp
Catalogues
http://www.elcomsoft.com/partners/
become.php#marketing_materials
Press kit
http://www.elcomsoft.com/download/presskit.zip
Password Recovery Software E-newsletter
http://www.elcomsoft.com/subscribe.html
Case Studies
http://www.elcomsoft.com/case-studies.html
Presentations
http://www.elcomsoft.com/presentations.html

Copyright © 2014 Elcomsoft Co. Ltd.
Elcomsoft and the Elcomsoft logo are trademarks or registered trademarks of ElcomSoft Co.Ltd. in the United States, Russia
and other countries. Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in theUnited States and/or other countries. Intel and the Intel logo are trademarks or registered trademarks of Intel Corporation or its
subsidiaries in the United States and other countries.