We use a NAS in our small office which is set-up so that each person has their own private directory on it. However the password to enter the HTTP administration area has been forgotten so we're unable to add/edit further people onto it.

Rather than doing a reset of the device and possibility losing data, I thought this might be an interesting chance to run a cracker against it to recover the password.

Please note we run Windows, so no Linux software please :)

  • It's probably worth checking it hasn't been left on the manufacturers default password which should be available from their web site. – Col Sep 1 '09 at 14:23
  • Good thinking - Unfortunatly I already gave that a shot and it wasn't username: admin and password: password ;) – Peter Bridger Sep 1 '09 at 14:33

John the Ripper, www.insecure.org. Earned its name with hackers.

From cnet - informative pages about the programs:



From sectools.com - also provides good info, plus, I think that these are the tools that hacker mainly use:


  • 1
    Google it and search the web is not valid answers. Please provide exact links with detailed information. – BinaryMisfit Sep 1 '09 at 14:25
  • @Diago Fixed it up. – The Green Frog Sep 1 '09 at 14:34

I believe you are looking for brutus, and if you want wordlists for bruteforcing, try one of these

Not the answer you're looking for? Browse other questions tagged or ask your own question.