Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [brute-force]

An attack using every possible input to attempt to produce the correct output. Typically the method of last resort when no weakness allows the use of a more restricted input set. E.g. trying all possible (or likely) passwords, in an attempt to guess the correct one.

Filter by
Sorted by
Tagged with
0 votes
0 answers
70 views

John the Ripper not working properly

I am new to JTR and am currently trying to crack some passworts I generated. Because I am new to JTR, I wanted to start by hashing a simple password like "Cat", write it in a file named pw....
darquis's user avatar
1 vote
4 answers
136 views

How do you rate limit bruteforce attempts on a Tor hidden service?

I'm considering the feasibility of a .onion domain for my website to cater to privacy conscious users. Actions that occur before there's a known UserID (eg. login page) need to have a bounded number ...
anthonyryan1's user avatar
0 votes
0 answers
26 views

How to correctly compose a command for brute force http-post-forms? [duplicate]

I encountered a strange error when using Hydra to brute force an http-post-form. Please tell me how to write a request correctly to avoid mistakes? hydra -L userslist -p passlist "url" http-...
DGDays's user avatar
  • 101
0 votes
0 answers
92 views

Hydra says different passwords with are correct each run, but only one works

I am doing CTF 'Skynet' from THM and came across this problem. Enumerating SMB, I gathered credentials 'milesdyson' and a list of passwords 'log1.txt'. I figured that I could try to brute force ...
Juan Vega Seco's user avatar
7 votes
4 answers
9k views

Is a randomly generated 80-bit password strong enough nowadays?

Theoretical question - Say we have a randomly generated password with 80-bit entropy, stored as a single-round, unsalted SHA256 hash. For a determined attacker with current (2024) technology, what ...
user13525's user avatar
1 vote
2 answers
191 views

Weak password hash + strong rate limiter = secure?

I have a microservice which sole purpose is to serve as a cache for other microservices. The point of the cache is to speed up processing, but the strong password hash algo counter that purpose. (...
Jasper Citi's user avatar
0 votes
0 answers
178 views

How to brute-force password of a GUI application? [duplicate]

I have forgotten the exact password to a locally installed Windows application I use. There is no password reset function. What I need is a way to use a source file of the various words/characters and ...
matt2024's user avatar
0 votes
0 answers
94 views

Can Sending All Possible Otp Codes Within 1 Second Bypass Server Protections? [duplicate]

I'm exploring the security implications of OTP (One-Time Password) authentication and wondering about the effectiveness of server-side protections against brute force attacks. If an attacker attempts ...
Favour's user avatar
  • 1
0 votes
0 answers
133 views

Cracking 1000-password assignment from hashed file

OS: Ubuntu 20.04 on VMWare, tool: John the ripper The whole system is up-to-date The file has 1000 hashed passwords. There are 40 rules provided, a small word list is provided to help crack part of ...
nooonamee's user avatar
-1 votes
1 answer
266 views

bruteforce local software's password

There is a lot of online tools to bruteforce online server like hydra and offline with hashes like hashcat. Yet it seems very weird that there is not a single offline bruteforcing app for software. ...
the shadow's user avatar
0 votes
1 answer
103 views

FFUF command returns status code 400, regardless of mode option: clusterbomb, pitchfork, sniper

I'm working on a lab on PortSwigger.com titled Username enumeration via different responses. While using ffuf to solve the lab, the output keeps returning a 400 status code. So far this is what I've ...
Michael Sodeke's user avatar
0 votes
1 answer
70 views

GTK and 4 way handshake

GTK is transferred at 3 message. https://www.wifi-professionals.com/2019/01/4-way-handshake What is for GTK key in 4 way handshake while PTK exists?
Ирина Грачева's user avatar
2 votes
1 answer
581 views

Using Hydra on a NTLM authentication

I'm learning Active Directory attacks and in one of the labs we are given the example of gaining the initial foothold in an AD system via NetNTLM by performing a password spraying attack. For the ...
user2334659's user avatar
1 vote
0 answers
28 views

Hydra returning all credentials as valid [duplicate]

I am setting up a brute-force with hydra, and receiving valid responses for almost all requests from passwords list. But on the web form I am still getting an error that credentials are wrong. What am ...
SwissClaw's user avatar
0 votes
0 answers
474 views

How can I understand the zip2john hash format?

I had a .zip file that was apparently encrypted with AES-256 deflate. 7z l -slt archive.zip | grep Method Method = AES-256 Deflate Then I used zip2john to get a "hash" out of it: archive....
IRP_HANDLER's user avatar
0 votes
1 answer
176 views

Does 7z or RAR5 offer better resistance to brute force attacks?

Does 7z or RAR5 offer better resistance to brute force attacks?
oqdn's user avatar
  • 1
0 votes
0 answers
139 views

Brute-Force by using XAMPP on windows, Ubuntu installed in Windows and DVWA

I am currently using XAMPP installed on windows to do a brute-force attack to DVWA. The command prompt that I used is Ubuntu, but the virtual machine is not opened and installed. Just a command prompt ...
Code Nauh's user avatar
0 votes
0 answers
29 views

Retrieve TOTP seed from tokens and timestamps [duplicate]

I recently switched to or added the option to use time-based one time passwords, TOTP, as the second factor for some services I use. It got me wondering if it's possible to retrieve the secret seed if ...
FalcoGer's user avatar
  • 392
-2 votes
1 answer
333 views

Is it possible to bruteforce SHA256? [duplicate]

SHA256, 64 characters using only 0-9 or lowercase a-f Making 1.15792089E+77 total possible combinations. Is it possible to crack the input for its given hash?
San's user avatar
  • 1
1 vote
0 answers
1k views

How to crack KeePass database when knowing the first part of the master password [duplicate]

I have a KeePass 2.47 database which is protected with a master password and a key file. I managed to lose the 2nd part of my master password. So, I have access to the database, the key file and the ...
Yannis's user avatar
  • 111
0 votes
1 answer
354 views

What's stopping attackers from brute forcing SSH passwords over new sessions?

I know that when you attempt to log in to a device via SSH, upon inputting an incorrect password, you must wait several seconds before you get another attempt. This is obviously a deterrent against ...
Blue Herring's user avatar
0 votes
1 answer
775 views

LUKS brute force risk?

If a person finds an old hard drive that was partially overwritten and let's say 1GB of that wasn't and was formerly used for part of a LUKS encrypted partition, what is the risk that such data, which ...
ppppppp2's user avatar
0 votes
0 answers
138 views

Brute force copy of PKI root certificates

If an attacker wants to create a phishing website with a fake TLS certificate, to my noob mind, there is a way to do this: Create the fake website certificate Create the hash for this certificate ...
Martijn's user avatar
  • 51
1 vote
1 answer
9k views

Why hydra showing this error [ERROR] could not connect to ssh://192.168.0.1:22?

I am using hydra to bruteforce my router admin page. By scanning with nmap it is showing port 22 ssh is open and when i use medusa it is bruteforcing properly but with hydra i am using this command : ...
Cophmat's user avatar
  • 11
1 vote
0 answers
2k views

Hydra brute force ssh usernames with given RSA key

On a machine supporting ssh, an RSA key is given but no username. My idea was brute-forcing the SSH username with Hydra but I didn't find any option to give the RSA key to Hydra. Is it possible to ...
UndercoverDog's user avatar
1 vote
1 answer
196 views

Unlisted directory discovery of a web server without using bruteforce attacks

Some creator I support on SubscribeStar hosts their files on a dedicated AWS web storage server of theirs and the names are easily accessible and sometimes guessable without any kind of security or ...
Matcha's user avatar
  • 111
2 votes
1 answer
3k views

Why does Hydra SMB attack not work while Metasploit does?

I'm learning about password attacks, and doing TryHackMe labs. User: penny Pass: leo1234 When using Hydra to find the password for the SMB user, I get no valid results: I know the valid password is ...
zeromeia's user avatar
0 votes
0 answers
6 views

Server directory bruteforcing [duplicate]

Recently I saw hundreds of strange requests from different ip addresses in my server logs. These requests were trying to bruteforce directories for example: GET /admin/admin.php 404 GET /admin/...
Ivan's user avatar
  • 1
-1 votes
1 answer
707 views

Why I can´t access my -u and -s flag in Gobuster [closed]

I was trying to use the gobuster tool but I came across this error that I can't find an answer no matter how much I search. How am I supposed to be able to use these two flags with gobuster? ──(kali㉿...
larasputinnieiwqgbpre's user avatar
0 votes
1 answer
712 views

How long would this take to bruteforce?

I am working on the following war game from Defend The Web, which requires me to do a source code review to login as the user memtash. The code is on GitLab here. Having inspected the source code ...
user5623335's user avatar
0 votes
1 answer
100 views

Does this implementation of 2FA expose valid credentials?

I have come across scenarios where a website would send OTP once a user has supplied valid username/password. A confirmation dialog e.g. An OTP has been sent to your registered mobile number would be ...
Youbecks003's user avatar
5 votes
5 answers
5k views

Randomly generated secrets: encoding the random bytes in base64 vs keeping them

Today this came to my attention. When generating random secrets for e.g. JWT (in node.js the most common way is using the crypto.randomBytes() method), I have noticed a lot of people save these tokens ...
Sam's user avatar
  • 169
1 vote
1 answer
2k views

Brute-Forcing DVWA login page with hydra - csrf incorrect

I'm learning how to use hydra, but I found a problem. When I run the following script, I get a CSRF token error. Apparently, the problem is that the token received in CURL is different from the one in ...
Laszlooo's user avatar
0 votes
1 answer
2k views

John The Ripper succedeed in finding password without printing it

Some days ago I tried to found the password of a file encrypted with AxCrypt 1.x. I tried John The Ripper and HashCat, but for unknown reason with the last one I failed, and I will open a new thread ...
user avatar
3 votes
2 answers
1k views

Brute forcing lost password for PGP encrypted file (symmetric)

I have a file I encrypted with PGP in 2003. It contains some personal data I'd like to regain access to. I have vague idea of the password, but not enough to successfully guess; but I know its ...
mdw's user avatar
  • 31
1 vote
0 answers
229 views

"john --format=axcrypt" is not returning results

I would like to open a mysterious old file that I found on my Hard Disk, the contents of which I do not know nor can I guess from its name (PB-mp4-rar.axx). The file was password-protected with the ...
user avatar
4 votes
1 answer
1k views

Is brute force for SSH similar to cracking WPA2 handshake?

I heard recently that WPA2 passwords can be brute forced if somebody captures handshake (which is not very difficult). Can somebody tell if a similar method exists for cracking SSH traffic? I mean ...
John Smith's user avatar
1 vote
1 answer
244 views

Is it secure to expose a salted bcrypt hash IF it is maximum length random secure password?

Is it secure to expose a salted bcrypt hash (minimum 14 cost) if the used password is 72 characters (maximum) byte long, randomly generated letters, numbers, and special characters using secure ...
DonEr's user avatar
  • 13
2 votes
3 answers
357 views

Best way to bruteforce a list of hashed integers?

I have a list of hashes, I need to find the original value of any of them. So far I know that the hashes are only numbers of length 30. The format should be something like ...
Spiral's user avatar
  • 23
2 votes
0 answers
143 views

How to configure Windows Server 2012 Firewall to block this bot attack?

My Windows logs are flooded with what looks like a brute force attack on my machine. I want to be able to block these ports from the outside, but I'm not certain what service this is and what port ...
Swisher Sweet's user avatar
1 vote
0 answers
208 views

How to limit number strings with crunch

I'm currently trying to generate a very specific word list. The words generated should go like this: crunch 9 9 -t @%%%%%%,,-o test.txt But one of the constraints that I have given myself is that the ...
AyaBLA's user avatar
  • 11
1 vote
0 answers
748 views

Brute forcing the brute force page on DVWA v1.0.7 using hydra

I am trying to brute force the brute force log-in page on DVWA v1.0.7 (/dvwa/vulnerabilities/brute/) I have been working on this for quite some time but I keep getting a bunch of false positives when ...
lexy Odiwe's user avatar
0 votes
0 answers
1k views

Hydra and Telnet bruteforcing

To preface this I have full permission to do anything I want to any service I can find on this network as it's part of a course I'm doing in Ethical Hacking. I also want to mention that I'm quite the ...
GooseLee33's user avatar
0 votes
0 answers
118 views

Brute force prevention and alike with stateless API architecture

What are the patterns (best practices, whatever) to prevent brute force (and features alike) in stateless API architectures that keep the system stateless? Couldn't find anything regarding this topic. ...
GalacticRanger's user avatar
0 votes
0 answers
1k views

Hydra brute force not working for web app, but the correct password is in the list

I'm trying to brute force an Instagram account I created to play with Hydra. I ran the following command: Even though the correct password is in the list, it didn't work. This is the output I get: ...
Van1sh's user avatar
  • 1
0 votes
4 answers
797 views

Benefits of non-standard SSH port when password authentication is turned off

Is there any benefit of using a non-standard SSH port when PasswordAuthentication is turned off in sshd? The only benefit of non-standard SSH ports I know of is a reduction of the amount of brute ...
303's user avatar
  • 101
0 votes
1 answer
77 views

Do I need to set up super global SESSION for a web form?

I am building a web form in PHP, is just for the user to request information about my services or send comments, so I don‘t need the user to be logged with a username and a password, no databse. I ...
limakid's user avatar
0 votes
2 answers
5k views

Fastest way to brute force SSH

I'm doing a CTF on vulnhub and I need to brute force SSH. I've got 6 usernames and 15.000.000 passwords to try so I'm brute-forcing with hydra by running hydra -L users.txt -P $LIST/rockyou.txt -t 64 -...
RobotPwn3r's user avatar
5 votes
3 answers
21k views

Crack JWT HS256 with hashcat

Is it possible to crack a JSON Web Token (JWT) using HS-256 algorithm with hashcat on a normal PC? hashcat password.txt -m 16500 -a3 How can I calculate how much time it will take? JWT first section ...
Kokomelom's user avatar
  • 153
0 votes
0 answers
105 views

bruteforce attack inside iFrame

How can I change the value of src parameter inside the iFrame tag with programs like wfuzz or fuff? For example I have an iFrame on the server like this: iframe.php <html> <head><title&...
Freeman's user avatar
  • 241

1
2 3 4 5
16