Cybersecurity · hands-on lab
Security Lab 04: Password Strength and Hashing
See first-hand how fast weak password hashes fall to a dictionary attack, and write a policy that stops it.
- 35 minutesTime in the lab
- intermediateLevel
- 4 tasksChecked automatically
- CertificateVerifiable link when you finish
The situation
Scenario. During an assessment you recovered a file of password hashes from a test system (provided for you in this range). The security lead wants a concrete demonstration of why the company's "any 6 characters" rule is dangerous — and a stronger policy to replace it. You will use the standard tool john against lab-supplied hashes only.
What you will do
- Run the dictionary attack
- Record which accounts fell
- Why did one hash survive?question
- Write the new password policy
How it works
The lab opens in your browser: a real terminal or desktop, nothing to install. Work through the tasks, press Check after each one and the portal verifies your work. Stuck? Ask for a hint. Finish every task and you get a certificate page with its own verification link for LinkedIn or your CV.