L0pht Heavy Industries

L0pht was founded in 1992 in the Boston area as a location for its members to store their computer hardware and work on various projects. In time, the members of L0pht quit their day jobs to start a business venture named L0pht Heavy Industries, a hacker think tank. The business released several security advisories and produced widely-used software tools such as like L0phtCrack, a password cracker for Windows NT. On May 19, 1998, all seven members of L0pht (Brian Oblivion, Kingpin, Mudge, Space Rogue, Stefan Von Neumann, John Tan, Weld Pond) famously testified before the Congress of the United States that they could shut down the entire Internet in 30 minutes.
In January 2000, L0pht Heavy Industries merged with the startup @stake, completing the L0pht's slow transition from an underground organization into a "whitehat" computer security company. Symantec announced its acquisition of @stake on September 16, 2004, and completed the transaction on October 8 of that year.

On March 14, 2008, several members of L0pht sat at a panel at a standing-room-only group of InfoSec professionals at SOURCE:Boston. Present were Weld Pond, John Tan, Mudge, Space Rogue, Silicosis and Dildog.

L0pht Antisniff
AntiSniff is a program made by L0pht Heavy Industries, a hacking organization. AntiSniff combines a number of different detection techniques into a single program which can proactively test systems that are suspected of running in promiscuous mode. AntiSniff looks for specific operation system quirks that can indicate promiscuous mode processing. For example, some versions of Linus can be tricked into exposing themselves when confronted with a specially modified PING request. The trick is to build a PING request using the Internet Protocol (IP) address or the suspected machine but address it to a LAN adaptor that doesn't actually exist. Adaptors not operating in promiscuous mode will ignore the request because it isn't addressed to them. But since a promiscuous mode adaptor copies all packets, the eavesdropping station passes the requeset on to its own IP software which, in turn, takes the bait and responds to the PING. AntiSniff simply listens out for the PING response and, if it gets one, it concludes that a sniffer has been unearthed. This test can be circumvented, though, by hackers if they update their system with the appropriate patch or choose an operating system that doesn't make this same mistake.

L0phtCrack
L0phtCrack is a hacking program which performs both dictionary and brute force attacks against a list of encrypted passwords. It has a build in SMB packet capture facility that, when combined with a promiscuous mode LAN adaptor, can pick off encrypted passwords as they flow over the network. L0phtCrack is controlled from an easy-to-use graphical use interface (GUI) and has been ported to run on client operatin systems such as Windows 95.