l0stat

l0stat is a tool that uses L0phtcrack or LC3 results in order to generate a set of statistics that provide a global security view of the NT password database.

In a security assessment of password database quality based on L0phtcrack, how could you sumarize a 5000 account results information ? there's no way if you don't use an specific utility to do so.

l0stat provides statistical info about all user or computer accounts in terms of a basic and position analysis.

Basic Analysis gives a global view of strength of password account:

- Total accounts

- how many null passwords, same passwords as accounts, revealed passwords

- type of characters on password contents

- distribution of passwords classified by their lengths

Position Analysis gives a detailed view of patterns of password contents of revealed accounts:

- Amount of revealed characters at each password string position

- Frequency of characters depending on positions.

- Top 5 most repeated characters

- Top 10 combinations of 2 to 5 characters

- Resemblances between accounts and passwords