Questions tagged [brute-force]

An attack using every possible input to attempt to produce the correct output. Typically the method of last resort when no weakness allows the use of a more restricted input set. E.g. trying all possible (or likely) passwords, in an attempt to guess the correct one.

Filter by
Sorted by
Tagged with
0 votes
1 answer
59 views

Crack JWT HA256 with hashcat

Is it possible to crack JWT with HA-256 algorithm with hashcat on a normal PC? hashcat password.txt -m 16500 -a3 How can I calculate how much time it will take? JWT first section for example ...
user avatar
0 votes
0 answers
32 views

bruteforce attack inside iFrame

How can I change the value of src parameter inside the iFrame tag with programs like wfuzz or fuff? For example I have an iFrame on the server like this: iframe.php <html> <head><title&...
user avatar
  • 221
2 votes
1 answer
105 views

I am still receiving ssh-bruteforce on my VPS

I have a server in Oracle Cloud Infrastructure Ashburn. I am using Tailscale to SSH my servers and closed Port 22 in public. I closed Port 22 on the VCN and left Port 22 open on the server. But no one ...
user avatar
0 votes
0 answers
15 views

Can anyone help finding what's shady things are logged on my nginx webserver? [duplicate]

I have a hosted a simple react website(testing) with nginx webserver and cloudflare as ssl provider.My website is down from few days with cloudflare error 525 "SSL handshake failed".I was ...
user avatar
0 votes
1 answer
67 views

How to Find Encryption when knowing Input Plain Text and Output Encrypted Text? [duplicate]

When I submit an Customer Reference ID in an Android Application it POSTs an Encrypted String to an API Endpoint. For example, if I enter the following CR ID : "CR-13261150" it POSTs the ...
user avatar
0 votes
1 answer
80 views

Hashcat brute force - markov chains

Hashcat uses Markov chains by default when using brute force mode. Do they really speed up the cracking since a randomly generated password normally has the same probability for every combination?
user avatar
0 votes
0 answers
30 views

Bruteforce on RDP [duplicate]

I have an internet-facing RDP server and getting constant brute force attacks trying random usernames and passwords. It's Windows 2016 with remote desktop services enabled. What can I do to stop this ...
user avatar
  • 1
0 votes
2 answers
53 views

Design for deleting users accounts, yet knowing when they register again

My webapp takes in email addresses as user names at registration, verifies ownership by sending emails with confirmation links, etc. I'm now looking for a secure design of a user deletion feature, ...
user avatar
-2 votes
2 answers
121 views

How to Find Encryption Type by Seeing Encrypted Text? [closed]

When I submit an Customer Reference ID in an Android Application it POSTs an Encrypted String to an API Endpoint. For example, if I enter the following CR ID : "CR-13261150" it POSTs the ...
user avatar
  • 7
0 votes
1 answer
80 views

Brute force alphanumeric passwords between 1 to 7 characters long with ZAP

In BurpSuite, you can brute force a password of any length and any character set (in my case, alphanumeric passwords between 1 to 7 characters long). How does one do it in OWASP ZAP, without actually ...
user avatar
0 votes
0 answers
25 views

WHMCS client login brute force protection

Over the past few days we've noticed high load on our server caused by brute force attacks on our billing system (WHMCS). WHMCS does have built in brute for attack protection but only for the ...
user avatar
0 votes
0 answers
50 views

Which password is more secure? [duplicate]

Which password is harder to guess/brute-force: onlysmallletters! Ez65);k And also, can you explain your answer?
user avatar
0 votes
1 answer
54 views

Does MacOS Filevault + Mac hardware obviate lengthy login passwords?

Take the combination of an encrypted disk with a secure enclave chip that never exposes an internal Key Encryption Key and throttles or prevents too many password guesses. Seems to me that this should ...
user avatar
0 votes
0 answers
69 views

Allow for login through Tor while preventing brute force/distributed password attacks?

I am making a website with the goal of blocking bots that are trying to login from different IP addresses constantly... while still allowing regular users to login via Tor. One of the approaches to ...
user avatar
1 vote
1 answer
75 views

Array of passwords in authentication api

I'm doing security labs on portswigger.net. One of the labs asks to avoid authentication. Intercepting the api call I see that payload for authentication is small json: { "username": "...
user avatar
  • 115
0 votes
0 answers
40 views

Desktop App Brute Force [duplicate]

Could anyone suggest some tools to brute force a desktop application? I am new to pentesting and have just about got my head around the very basics of pentesting web applications. However, I have been ...
user avatar
24 votes
7 answers
11k views

After a password leak, is there a Levenshtein distance from which one a newly derivated password can be considered safe?

After a password leak, is there a Levenshtein distance from which one a newly derivated password can be considered safe? I assume yes, given that if e.g. the word was "password", and the new ...
user avatar
  • 422
1 vote
0 answers
145 views

How many random characters must an unguessable string contain?

I want to add a suffix to my URLs that makes them distinctive and therefore only findable by a person who knows that suffix. I considered using a UUID or hash, but these are usually very long. However,...
user avatar
  • 127
0 votes
0 answers
18 views

Bypass time limitation of OpenSSH when using Nmap [duplicate]

Terminal command: $ nmap 10.10.244.76 -p 22 --script ssh-brute \ --script-args userdb=trash.txt,passdb=rockyou.list,timeout=4s NSE: [ssh-brute] usernames: Time limit 15m00s exceeded. NSE: [ssh-...
user avatar
-1 votes
2 answers
352 views

What does it take to brute force 42 hex characters [closed]

What does it take to brute force something like this 00f54a5851e9372b87810a8e60cdd2e7cfd80b6e31 I can brute force anything else like iambad, blackapple1, etc But how can I brute force something like ...
user avatar
1 vote
1 answer
325 views

THC Hydra sends GET request without parameter before actual request with parameter which causes authentication problems

I am using THC Hydra (v9.0) on GNU/Linux to pentest my private API. The GET route in question requires a key as GET parameter which returns an auth token if the correct key was submitted else "...
user avatar
  • 11
0 votes
1 answer
124 views

Are dictionary and rainbow table attacks a subset of brute force attacks or are they seperate?

This is more of a question on the actual use of the terms rather than the definitions, so my question is this: Are dictionary and rainbow table attacks a type of brute force attack or are they ...
user avatar
  • 103
0 votes
1 answer
103 views

ncrack ssl option

There is the following option in ncrack (from the man page): Misc options: ssl: enable SSL over this service ssl (Enable/Disable SSL over service) By enabling SSL, Ncrack will try to open a TCP ...
user avatar
0 votes
0 answers
435 views

Help with hydra https-post-form

I am doing portswigger labs with hydra https-post-form. I try to look for packets that don't have status code 200 OK, because when checked in burp my failed login with bad password and good username ...
user avatar
  • 1
0 votes
0 answers
226 views

John The Ripper numbers mask

I'm using john on Windows and I use pdf2john. What do I have to do to crack this password? I saw previous passwords and they were 4 digits (1234), possibly there may be more now. currently trying to ...
user avatar
  • 1
0 votes
1 answer
87 views

If a platform/system has brute force protection should I care for a very strong password

If a platform has brute force protection should I worry about creating a very strong password since any attacker would not get a chance to reach enough attempts to crack even the weakest password? Not ...
user avatar
  • 101
1 vote
0 answers
87 views

Shamir secret sharing, is security reduced by chunking a secret into smaller blocks?

When using Shamir's secret sharing algorithm one has to define the size for the finite field over which the secret is split. I came across a few implementations, like secrets.js-lit, and as far as I ...
user avatar
  • 695
0 votes
2 answers
391 views

How does having a password hash speed up cracking vs not having a hash (on-site)?

On Windows, user password hashes are not salted and, on Linux, user password hashes are stored in the same root-owned file as the salt. Given this, in what ways might a bruteforce attack to find the ...
user avatar
  • 331
1 vote
2 answers
537 views

How to generate a wordlist from a partially known password

I have an old USB drive encrypted with Truecrypt and can't read my password writing. I can't tell if it's a capital or lower case letter and not sure if it's a 0 or an o, a t or a + on about 7 spaces. ...
user avatar
  • 11
0 votes
1 answer
159 views

Making already hashed wordlists of all possible combinations [duplicate]

Let us imagine a situation where a company stores its user passwords (let's ignore salts, etc for now) using some hash (say sha256) and the company gets breached. All of the username and password ...
user avatar
  • 1
-1 votes
1 answer
115 views

How to guess 8 character long reset token [closed]

Reset token contains lower case a-z, 0-9 number, there will be at maximum 5 number, at minimum there will be 0 number. It is randomly generated. How many possiblities do we have? How much time does ...
user avatar
22 votes
4 answers
8k views

Does password length / complexity make any difference if hashes are leaked?

Password length/complexity only mitigates a brute force attack, correct? In the event of a hash leak, since any algorithm is a fixed length, there could potentially be a pre-image* with a very short / ...
user avatar
  • 323
0 votes
1 answer
1k views

7z "Copy 7zAES" algo brute force with 32 char password for when original file is available (QNAP QLocker ransomware) [duplicate]

As some in here might know, there is/was a ransomware attack going on worldwide that used 7z to encrypt all files <20MB for a ton of users world wide. Each user has a unique 32 char password (Upper ...
user avatar
0 votes
0 answers
169 views

How can I add some probable Keywords to hashcat, so I can Brute-Force attack a WPA2 Network faster

I´m trying to brute force attack a WPA2 Network with Hashcat and a wpa2.hccpax file, but when I do it says that it can take 45years to brute force it. So I had the idea that probably the network I´m ...
user avatar
1 vote
0 answers
146 views

Tool(s) for cracking insecure RSA keys

I have a 60-bit RSA public key and a file encrypted with it. Since RSA with keys under 256 bits should be crackable with even limited computational resources, is it possible to obtain the decrypted ...
user avatar
0 votes
0 answers
51 views

Bypassing Hydra's 4 billion password limit [duplicate]

I'm trying to get into my friend's email (he is okay with it, we discussed it) and I'm using Hydra, but it has a limit to its bruteforcing that I can't seem to bypass, does anyone know how I can?
user avatar
1 vote
2 answers
356 views

How to generate all possible combinations of a forgotten password

I have forgotten my password but I know the words used in the password. I remember the password was something like MyPassport@1.82TB. Is there any software that can produce all combinations like ...
user avatar
5 votes
4 answers
2k views

Having a list of hashes for the same password compromise the security of the password?

An attacker want's access to a specific account, he doesn't know the password. It's a high entropy password. +128bits The attacker has the hash for the password (Assuming OWASP suggested bcrypt with ...
user avatar
2 votes
1 answer
1k views

Are bcrypt hashes safe enough if exposed?

Considering: A VERY motivated attacker, A large entropy password, as in 256bits¹ hashed in bcrypt (with recommended cost factor of 12), and Attacker knowledge of everything he might need (except the ...
user avatar
1 vote
0 answers
249 views

Hardware for password cracking

I'm planning to extend my pentest services to Password Cracking, to be more precise: Cracking Active Directory Passwords, extracted from the customers Active Directory in order to check users ...
user avatar
  • 131
1 vote
1 answer
346 views

In Hashcat, How to generate combinatior attacks consisting of more than two words (in lenght)?

I am trying to make a combinator attack using just one dictionary: word1 word2 word3 word4 word5 ... And would like to try all 4-words-length permutations separated by commas: word1,word2,word3,word4 ...
user avatar
  • 113
1 vote
1 answer
102 views

Does knowing part of a passphrase for sure really mean that you can "disregard" that entire part when trying to crack it?

Alice bought 1 Bitcoin and encrypted her wallet.dat in Bitcoin Core. Samantha, Alice's friend, notices the Bitcoin price skyrocketing and, while Alice is in the bathroom, steals Alice's wallet.dat as ...
user avatar
  • 11
1 vote
2 answers
223 views

Hacking attemps from unkown source

I'm running a docker container in Kubernetes cluster running in aws, I exposed the container through LoadBalancer service and limited access to it just to my ip address using aws security groups, but ...
user avatar
  • 53
1 vote
0 answers
24 views

If and how security-oriented CDNs protect from BFAs? [duplicate]

I understand how some CDNs also suffice protection from DDoS attacks by distributing content serving via various machines instead just one machine so that distributed attacks on one machine become ...
user avatar
  • 11
1 vote
1 answer
446 views

Can you bruteforce a SSH password without alerting the server owner?

What happened? This is a live event that a friend of mine is working on, a company's systems were breached by a Threat Actor (TA), when the Cyber Sec company was called in and tried to regain access ...
user avatar
0 votes
2 answers
172 views

Brute force without DOS'ing the server

How to conduct brute force tests for directory traversal or other operations that require trial and error without accidentally turning it into DOS attack? It comes to how much bandwidth a site is ...
user avatar
2 votes
1 answer
124 views

How can the passphrase matter besides the very most obvious patterns? [duplicate]

Let's say that my passphrase is: aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaapassword9 Yes, it looks ridiculous. But only because we already know it. An attacker, trying to brute-force their way into this ...
user avatar
1 vote
0 answers
104 views

Preventing BFAs in website login forms without Rate limiting, Captcha or Two factor authentication

I have the problem that in my particular Content Management System (CMS), preventing BFAs in website login forms without Rate limiting, Captcha or Two factor authentication isn't ready out of box or ...
user avatar
  • 11
1 vote
1 answer
364 views

Is the Amazon S3 Pre-Signed URL protected from brute force attack?

I want to know that whether Amazon S3 Pre-Signed URL is protected from brute force attack. For example, if I am the only person who knows the Pre-signed URL, is it extremely unlikely that somebody use ...
user avatar
2 votes
1 answer
4k views

John The Ripper Error: No password hashes loaded when cracking a zip file in kali linux

I was practicing bruteforce attacks using John The Ripper. I want to crack a zip file. I obtained the hash and stored it in a zip file but when I attempt to crack the zip file it is giving me an error ...
user avatar

1
2 3 4 5
15