John the Ripper vs. Nikto

It is best suited in those environments where complexity is not the key. We've used it fairly extensively in our UNIX to find weak UNIX passwords and in Windows environments too. It's very easy to get hold of as it is essentially Open Source, although a paid version is now available and we are thinking of looking at this proposition in-depth to see if it is viable. We found it easy to install and deploy across our systems. Patching was fairly regular, so we always had the latest version. It holds its own against DES and Blowfish encryption algorithms among many others.

Incentivized

Nikto is well suited for scanning web server-related vulnerabilities for small and medium enterprises. We can utilise it for checking server default files and security misconfigurations. It is not suited well for some users because it is CLI based tool and not a GUI based. Also, community and OEM support are not available for this tool.

Incentivized

• Easily finds plantect passwords.
• Simply detects passwords hashes.
• Has a fully bespoke cracker that can be modified to users requirements.
• Excellent for UNIX and Windows usage.

Incentivized

• Well known tool
• Source code available
• Wweb server vulnerability scanner

Incentivized

• It needs to be modified to be able to break SHA 256, 512 and the lastest hashes.
• Can be slow and wildly against the lastest hashes.
• Require admin access to set up account.
• Old and is being superseded by better applications.

Incentivized

• Can be made GUI based for ease of users
• User community should be there
• Development and support should be available

Incentivized

'John the Ripper' being open source was free to use, whereas the others had to be paid for. It was very simple to install and runs against many hundreds of hashes and crypts. It is always developing thanks to large communities on GitHub.

Incentivized

• Helped us achieve initial Password Auditor goals and targets.
• Simple and cheap to deploy, so have saved greatly compared to paid for products.

Incentivized

• Improved security posture of organisation.
• Improved in regulatory and corporate compliance.
• Easy to use result in adaptation of this tool by business users.

Incentivized