SynerComm Password & Hash Assessment

SynerComm Password & Hash Assessment Services is a professional security assessment service focused on analyzing password hashes and cracking credentials to identify organizational credential vulnerabilities. The service goes beyond standard password cracking by analyzing the hash data itself to uncover hidden patterns and systemic weaknesses. It covers Windows Active Directory environments as the primary use case, as well as nearly all other common password hash types and application passwords. Core analysis capabilities include: - Full-domain Active Directory password assessments - Detection of password reuse by leveraging the unsalted nature of NTLM hashes - Identification of blank passwords and weak LAN Manager (LM) hashes - Compliance gap identification for user and service accounts - Substring analysis to detect recurring character sequences, leet speak patterns, and non-dictionary word strings Cracking methodology employs GPU clusters and combines multiple techniques: - Dictionary attacks using hundreds of millions of breached and common passwords, including 20+ character passphrases - Brute-force and mask-based attacks targeting 10+ character passwords - Over 50,000 substitution and permutation rules The service uses a proprietary tool called Hash Master 1000, which provides statistics on cracked vs. uncracked accounts, cracked password lengths, policy violations, and password reuse. Subscription-based engagements support quarterly assessments to track trends over time, monitor security improvements, and detect emerging weaknesses. Deliverables include actionable, prioritized reporting with expert human analysis.