https://contest.korelogic.com/
As a part of an authorized penetration test of a large corporate network, you have captured a large number of password hashes. The hashes are from Active Directory, UNIX systems, LDAP servers, routers, etc. As part of your analysis, your client has asked for password complexity statistics, what their users are doing right and/or wrong related to generating passwords, and identification of weak passwords. You only have 48 hours to complete this effort.
http://hashcat.net/
http://ixplizit.wordpress.com/
You can find them all at the website of korelogic
iXpLiZiT 10 months ago