Thanks. Wonder why they can't put a description on the GitHub page?

Yeah, the repos don’t even have a useful README, at least to understand whatever the software does…

README.md should be renamed to BUILD.md; check under doc/ for a useful description.

It’s a widely known password auditing tool that’s been around for 24 years.

I have been following programming and technology for decades and I had never heard of it.

Every project should have a concise (one or two sentence) description in the GitHub README and the website's homepage. Even the most well-known tools.

It's a cracking tool. If you never needed to crack NTLM passwords or bruteforce windows shared folder passwords over dialup, you might not have heard about it in the casual technology news.

Only if you care about onboarding people not familiar with the industry (security in this case). This is not a given for many devs.

I agree they should have a description in the readme, as a courtesy if nothing else.

But L0phtCrack is a very well known tool. If you've never heard of it and have been following security stuff for decades, that's really on you.

What do you mean by "that's really on you"? I'd normally interpret it as something like... "this is a state of affairs that would be different if you'd acted differently, and you knew or could have been able to know this in advance". Along those lines, anyway. But not having heard about a tool doesn't really seem to fit that.

>What do you mean by "that's really on you"?

At some point, a tool is so ubiquitous that it's just odd to not have encountered it. You don't see many accountants that haven't heard of Excel, webdevs that haven't heard of Apache, construction workers that haven't heard of a hammer, or cybersec workers who haven't heard of L0phtCrack.

It means it's their fault because they clearly were not paying attention or their memory has failed them.

L0phtCrack has been decreasingly relevant in the past 10 years or so -- it wasn't available for awhile and some free tools are similar so you were basically buying the rainbow tables -- but if you were in security in the Windows 2000 or Windows XP era, you know of this tool. There was a lot of discussion for years around and about password crackers after rainbow tables became a thing.

It's not like not knowing what Wireshark or nmap is, but it is like saying that you've never even heard of Kismet or John the Ripper. Or like being a DBA for decades that never heard of Informix. Or a programmer for "decades" that has never even heard of Delphi. Like what were you doing in the early 2000s to have completely missed the death of Borland and Pascal and the popular variants? These are big enough events in the industry that if you're in it you're going to be aware of it.

Ideally so, but if you've never of heard of this tool, you need to expand your news sources for many reasons. This is just a symptom

This is assuming that everybody has an interest in cybersecurity. I can come up with equally well known (in specific circles) tools that you may not have heard of.

Can you suggest some news sources?

Do you ever make it to DC or Blackhat? Not having to introduce/advertise who you are or what your tools do is part of the scene.

They are not at github even, doh...

Obviously they should have.

But it's like the Elvis Presley of password crackers.

What’s the Big Mama Thornton of password crackers?

I envy you for your age... There was a time when everyone and their dog knew what L0phtCrack was.

So it's a hash cracking tool? How does it compare to Hashcat? Any notable distinguishing features?

It's a part of it, also open-source https://gitlab.com/l0phtcrack/hashcatdll

Thank you...