Scan your Active Directory for Compromised Passwords

In less than 15 minutes you can do your own self-audit know exactly who on your network is using a password that has been breached.

The nFront Weak Password Scanner can scan your active directory against over 700 million breached passwords in less than one second. Unlike other tools it can also tell you the usernames associated with the compromised passwords. Due to hashing it cannot tell you the password but due the match of hashes it lets you know with certainty the hash has been compromised.

You are presented with a menu of choices when you launch the scanner with the -m option. Select option 1 to scan the users.pwdump file.

 

The scan will go through all user accounts. If the account password is not found the line entry is green. If the account is using a compromised password the line entry is read. At the end it will list the total number of accounts scanned and the number of weak passwords.

 

TLDR; Just show me the video of the steps.