The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
18 views

Cracking WPA2 using Intel HD Graphics GPU [migrated]

I use Linux Kali and yesterday have captured a WPA handshake of my network. I want to crack it's password - but my CPU with aircrack-ng checks only about 2000 keys per second. In my laptop I have got ...
0
votes
1answer
57 views

Can a botnet be used to effectively break encryption keys?

Can a botnet amass and coordinate enough computing power to break encryption keys that are typically considered to be secure (through brute force)? If this is the case, do we need to make our ...
-2
votes
2answers
88 views

Find DES encryption key having input and encrypted output

Having the source string: S3nh4#1 And the generated encrypted string: csf7259aT07Rw Using this script, it identified the algorithm used to encrypt as DES(Unix) I wonder if it is possible (in ...
2
votes
2answers
172 views

Obstacle in Implementing a Time Limited/Number of Use Limited Software

How does one implement a trial period in a product properly, e.g. a trial period that lasts 30 days, or limits the number of product uses to 10? Storing the entries, even in an encrypted form, isn't ...
1
vote
0answers
34 views

Cracking MD5($p.$s) [duplicate]

I have a salt and a password for an application that is using MD5($password + $salt) and I'm looking to crack it. I believe this to be the same format that joomla uses. I'm having trouble figuring out ...
0
votes
1answer
125 views

John the Ripper password cracker is viable?

Is this still viable? I remember using this when it just worked in shells. http://www.openwall.com/john/
1
vote
4answers
124 views

Is there any defense against Brute-Force done on a local encrypted file?

Let me start off by saying I don't know very much about encryption, hashing, cracking, etc. I'm just a typical computer enthusiasts, programmer and researcher with many questions. So, I've discovered ...
0
votes
1answer
464 views

Cracking Kingston DataTraveler vault privacy - is it possible?

I have Kingston DataTraveler vault privacy USB flash drive (DTVP/2GB). Here is tech specs. Flash drive has a 256-bit AES hardware based encryption. My flash has password protected and I do not know ...
0
votes
0answers
35 views

Xbox and Playstation copyright protection vs PC

AFAIK, both Xbox one and PS4 use x86 IC very similar to PC. The questions are: 1/ How can they keep those console systems protected from cracker and software privacy? What is the main method to ...
3
votes
2answers
238 views

Is it unsafe to have hashes of parts of a private string

We have string B and the hashes hash(P+B), hash(P); is it possible for P to be revealed easier using this information than having hash(P) ? What is the difference ? Any links to articles or any ...
5
votes
1answer
448 views

Chinese or “pinyin” wordlists for dictionary attacks

Background: I am currently trying to crack a salted md5 hash which I have recovered from an embedded device running busybox and manufactured in china. I have tried john the ripper using all of the ...
-2
votes
3answers
123 views

My friend hashes passwords with SHA512 algorithm without salt. How do I convince him that he needs to add salt?

Today I discovered something incredibly stupid - my friend hashes user passwords with sha512 algorithm without a salt. I immediately raised this issue to him but he said he wants to see anyone crack a ...
0
votes
0answers
241 views

John the Ripper - Calculating brute force time to crack password

I'm using incremental mode (brute force) mode in John the Ripper to crack Linux MD5 passwords. I'm trying to calculate the time it will take to run through all combinations of 12 passwords (with 12 ...
2
votes
1answer
205 views

MySQL Authentication Hash Cracking

I'm currently conducting research regarding MySQL server remote authentication. I've captured unencrypted, uncompressed authentication packets between the client and the server where the username is ...
2
votes
1answer
1k views

How to crack SHA512 hexdigest passwords with John the Ripper?

I've been playing with John The Ripper (JtR) to try to crack/audit a salted password that was hashed with SHA-512, with 20 interactions according to the source (for the curious, this is a Rails app, ...
4
votes
2answers
190 views

XKCD-like passphrases to stdout

I'm trying to find a way to crack XKCD-like passphrases (correcthorsebatterystaple) from word dictionaries. Basically concatenate X number of words from a dictionary file. Right now it honestly ...
3
votes
5answers
227 views

Is it ever possible to crack an encryption key character by character?

In movies and TV shows, characters are often depicted using devices and applications that are able to determine an encryption key or passcode character by character (or digit by digit). I am a ...
7
votes
3answers
487 views

Password list generation

I've found during a lot of recent pen-tests that companies will use passwords like c0mp4ny@b( for a company called "company abc" Is there any quick and easy way to generate a list of passwords ...
1
vote
2answers
340 views

Brute force alphanumeric password using JohnTheRipper

I recently recovered a zip archive with some files I need access to, but I can't remember the password. All I can remember is that the password was short (around 3-4 characters), and contained only ...
-1
votes
1answer
187 views

Cracking a 6-character alphanumeric password Windows dialog box

To put this problem in context, I have a touch monitor screen whose firmware program is protected by a password. The firmware program is downloaded over RS232 via a Windows utility program provided ...
1
vote
2answers
89 views

Password Cracking Mandarin Words English Character Set

I'll be looking to perform a domain password audit in which the user will be using english characters but may be 40% Mandarin speakers so I anticipate a large number of names, phrases, or words that ...
1
vote
2answers
106 views

Database compromised and some passwords cracked

I run an MMORPG game and today while moving from one server to another, apache failed and listed some of the data on the server including a back-up of all the source code + database which a few people ...
3
votes
1answer
192 views

find passphrase on encrypted ssh private key

I have an openssh encrypted private key. I don't remember the pass-phrase. I may be able to suggest words or patterns that may be in the phrase. I am looking for software that will help me recover ...
2
votes
2answers
2k views

NTLM/LM Hashes on Domain Controller

I've noticed that when extracting password hashes from a domain controller (using Elcomsoft proactive password auditor) sometimes I'll get LM and NTLM hashes and other times I'll only get NTLM hashes. ...
0
votes
1answer
97 views

Why providing many protected zip files will increase the chance of retrieving the password

In fcrackzip man they say : the more files you provide, the better. I want to know why. What's the method it uses to retrieve the password?
1
vote
1answer
700 views

John The Ripper 1.7.9 Jumbo Cracking SSH Key Help [closed]

According to John The Rippers wiki page, John's Jumbo edition supports many new non-hash cracking options like ssh keys, gpg, variety of browser password managers, and many more. From the site I ...
1
vote
0answers
59 views

Crack WPA2 with username [duplicate]

As far as I know you can crack WPA2-connections if you have the four-way-handshake. Then your program calculates the PMK/PTK and you get the key for the network. But what is with a WPA2-network where ...
4
votes
2answers
4k views

Is it possible to crack a PIN / PUK code on a phone SIM card?

When deploying a mobile phone best practices policy, one of the points which were raised was the requirement for the user to protect his SIM card with a PIN. The theory is that three failed attempts ...
0
votes
0answers
121 views

Cisco/Juniper IOS hacking?

I am a University student and i'm currently working on a paper of ethical hacking. I have already investigated a lot about Web based attacks(SQLI,XSS,...) and about two months ago I started learning ...
19
votes
2answers
11k views

Why are GPUs so good at cracking passwords?

What is it about GPUs that lets them crack passwords so quickly? It seems like the driving force behind adopting good key-derivation functions for passwords (bcrpyt, PBKDF2, scrypt) instead of ...
1
vote
1answer
244 views

How do we estimate the time taken to crack a hash using brute force techniques

A German hacker famously managed to brute force crack a 160 bit SHA1 hash with passwords between 1 to 6 digits in 49 minutes. Now keeping everything constant (hardware, cracking technique - here ...
0
votes
2answers
83 views

Precise measurement of password complexity

I am thinking on a system, which measures the complexity of a password not based on its entropy or compressibility, but with a simply sophisticated method. The measurement of the ...
3
votes
2answers
178 views

Is AES encryption vulnerable?

I was reading weaknesses in AES encryption. Unfortunately, I have a website that uses AES: Its database is almost entirely AES encrypted. Is there a real threat? Would it be worth to refactor the web ...
1
vote
1answer
2k views

Cracking Mysql 5 Hash using Hashcat

I am practicing cracking MYSQL5 hash using hash cat, however, for a reason or another, it finishes the cracking process too fast -within 30 seconds- without giving any results/errors back. I doubted ...
-3
votes
3answers
77 views

Trying to secure a code

I am trying to make hard to a code to be modified. Security is my concern. Ok, I know what you guys will say about piracy, bla bla bla. Lets refrain from that discussion. I am trying to collect ...
1
vote
1answer
102 views

Cracking encrypted SQB databases

I've recovered a .SQB SQL database backup file from a backup server and do not have the password. As I do not have the password available to me, I'm looking to determine what type of encryption is ...
1
vote
1answer
696 views

What to do with .hash files when cracking WPA2

So, I'd say I'm one level above n00b. I've gotten to the point where I have accomplished a WPA Handshake (and saved the output as xxx-01.cap). I have also downloaded these hash tables (if that is the ...
-2
votes
2answers
3k views

Hydra https-form-post

I have never experimented much with online password crackers. I attempted to use Hydra today on this website www.athena2.harker.org and I keep getting false positives. This is what I have done so ...
1
vote
0answers
73 views

Can ophcrack crack credential files

i have obtained some credential files from another pc and would like to decrypt the credential files. These are the ones found under local/roaming profile in Appdata folder ...
1
vote
1answer
94 views

Where to offer money for cracking check [duplicate]

I made a software and I would like to distribute it as a demo that can be registered. I would like to know if there is a site where I can offer some reward for some one try to crack my software and ...
0
votes
2answers
5k views

If hashing is one way, why can we decrypt MD5 hashes?

I have read some times that hashing is a one way function, that is you can make the hash of a message, but you can't recover the original message from the hash, just check its integrity. However, if ...
3
votes
3answers
157 views

Should you notify software vendors that their software has been cracked?

Apologies if this is not the right place to ask this question, I will happily move it to another Stack Exchange site if need be. Before I explain the rationale behind the question, let me clear up a ...
1
vote
1answer
4k views

Forgot password to 7-Zip archive

I think I already know the answer to this question, but I thought I'd ask the experts anyway. A few months back, I created a password-protected 7-Zip archive which housed the source code of a simple ...
1
vote
1answer
177 views

Problems with l0phtcrack

I recently wrote a website for my company and have been asked to Pen test it as well as the server. Have run SQL map and no vulnerabilities there, however I want to check if my hash and things are ...
2
votes
2answers
391 views

Pattern based password cracking

I need to select a project for this semester. I'm a second year uni student in Ethical Hacking and Countermeasures. My idea was to see if using some kind of pattern based password cracking can be more ...
0
votes
1answer
419 views

WPA/PSK Dictionaries

So i have been reading some articles on WPA/PSK encryption, And one said that the hash is calculated like this: Key = PBKDF2(passphrase, ssid, 4096, 256) Where PBKDF2 is a standardized method ...
2
votes
2answers
751 views

What is the ultimate goal of hacking a webserver? [closed]

Recently I noticed a lot of traffic generated by automated bots that were checking for vulnerabilities in my web server. They were mainly looking for ways to hack into plesk/wordpress which I don't ...
1
vote
3answers
178 views

Cracking passwords after a patteren with ex. John

So i am trying to find out how easy it is to crack a password using some great Linux tools. We all know about John as a password cracker and how great it is. But how about specifying a patteren. ...
3
votes
2answers
246 views

Rainbow Tables: What is the Reduction Used for?

This is a follow up from this answer. The answer is very good, and it put me to thinking and doing some research. I have found another good explanation on this site. At some point, the author says: ...
1
vote
1answer
2k views

Brute force password cracking with a GPU

How are GPU's provisioned for password cracking? Do all, if not most cracking programs have special GPU aware software or do they just function at the basic driver or API level of the device? Can it ...