In today’s world, our smartphones have become so important. We depend on them whether we like it or not. Especially as the trend moves further toward digitalization. I’ve worked in IT for more than 10 years and have probably supported thousands (exaggerated) of end users. Not excluding the end users in my very own home, who keep reminding me that I really should post this article. I sometimes wonder if users are ready to lose their smartphone. There’s a sentence I keep hearing in Swiss German: “Wenn ich mis Handy verlüre. Was machi? Ich bi ufgschmisse!” ...

In this blog I want to demonstrate how adversaries create a custom password database to perform brute force attacks. The goal is to make users aware of why a password linked to someone’s identity, company or hobbies is not a good idea. With the help of CeWL and CUPP, an adversary can create a custom database easily. Credits to the authors are linked at the end of this post 🙂 Disclaimer: This technique is not new and is publicly available on the internet. This is used for educational purposes only. The city is purely fictional and created for security awareness demos only. No real systems or data are involved. ...