Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [brute-force]

An attack using every possible input to attempt to produce the correct output. Typically the method of last resort when no weakness allows the use of a more restricted input set. E.g. trying all possible (or likely) passwords, in an attempt to guess the correct one.

0
votes
0answers
20 views

Brute forcing the Veracrypt header with THC Hydra

I was advised to brute force the Veracrypt header with THC Hydra/Cygwin, but I don't know how to do that. Any help would be appreciated.
0
votes
0answers
25 views

Is it a bad idea to use the same password for nested encrypted containers? [duplicate]

A friend of mine recommended to me (a couple of years ago) to use multiple nested encrypted (true/veracrypt) containers for maximum security. I understand that concept. That same friend told me if ...
0
votes
0answers
29 views

THC Hydra: Login form within login form

I'm testing a website and one must first login, then there is an access code form after logging in, and inaccessible otherwise. If I am attempting to brute-force this access code form, how do I tell ...
1
vote
1answer
76 views

Partially forgotten encryption password for Windows users

I encrypted important files with Veracrypt and I remember most of the password but some parts are forgotten. I need some advice as to what would be the most efficient way of getting the encryption ...
0
votes
1answer
35 views

Brute force MD5 with a prefix and suffix up to n characters/words

I have a couple of things I would like to explore with hashcat. I have a MD5 hashed password, which I know for a fact has a prefix and a suffix. The actual password is located in the middle of the ...
-1
votes
1answer
65 views

Should I blacklist countries to stop brute force attacks?

I'm getting attacks at wp-admin from numerous countries and IPs. When I get a notification from Wordfence that there has been an attack, I blacklist the originating country from the WP backend. Then I ...
0
votes
1answer
87 views

I think my raspberry was hacked, what should I do? [duplicate]

First of all, sorry if all of this seems a bit stupid, but my field of expertise is software development, not security. So, here is what happened. 1/ The breach I did something I really shouldn't ...
1
vote
1answer
60 views

Are there any known collisions of a “long” (64 bit) OpenPGP key ID?

We know that the "short" 32 bit OpenPGP key IDs can be easily brute-forced and the recommendation is to use the "long" 64 bit IDs or full 160 bit SHA1 fingerprint. However I am concerned that the "...
2
votes
1answer
108 views

Partially forgotten encryption password

I encrypted important files with Veracrypt and I remember most of the password but some parts are forgotten. I need some advice as to what would be the most efficient way of getting the encryption ...
0
votes
0answers
61 views

What can attackers do to increase the rate of attempts in a brute-force attack as the number of attempts increases?

I am aware of this post (about Moore's Law and brute-force attack). Suppose is the number of brute-force attempts, we have . What I want to ask is the following: suppose an attacker started a brute-...
0
votes
2answers
72 views

Brute-force attack to exe file [closed]

I have an encrypted file and the program.exe through which it was encrypted. When I want decrypt file, I need to know the password with which the file was encrypted. Can you help me some tool for ...
3
votes
2answers
135 views

Is using a phrase from a book as a password such a bad idea

I've been told/seen online that choosing a sentence or a phrase from a book and using it as a password is a bad idea. How is this true? Unless the potential attacker knew which book you used I don't ...
2
votes
2answers
41 views

Account lockout to protect from brute force: doesn't it open up vulnerabilities to DOS attacks? [duplicate]

AFAIK the recommended practice to mitigate brute force attacks is to lock an account down for, say, 15 min (perhaps escalating lockout time if the attack continues afterwards?) after, say, 5 failed ...
2
votes
2answers
119 views

Why is it still necessary to block brute-force attacks when passwords hash verification requires significant work?

For authentication controls, Owasp gives advice to prevent brute-force attacks by locking out account, and I see this kind of advice in several places (blocking by source IP after failed logins, ...
1
vote
1answer
42 views

Hashcat bruteforce define digit range form and to

I know this password is between 90,000,000 and 500,000,000 how can I tell hashcat to bruteforce exactly in that range? I mean starting from 90,000,000 and ending at 500,000,000 I go the password ...
25
votes
6answers
8k views

What would be the key size for a picture used as a key?

I'm working on a cryptosystem that uses colour pictures as keys for encryption. I'm trying to guess what is the key size of my cryptosystem in order to find the feasibility of a brute force attack. My ...
0
votes
0answers
21 views

Metasploit: disable auxiliary/scanner/http/brute_dirs for wmap_scanner

I am running wmap scanner on one of my docker container with IP address 172.17.0.2. The container returns a 200 OK response to every URL. So when I run the wmap_Scanner the bruteforce (auxiliary/...
1
vote
1answer
44 views

What are the disadvantages of using Shamir's Secret Sharing to implement a Partial Password scheme?

Suppose I want to implement a partial password scheme, where the user authenticates by using two passwords: one a normal password, the other is partial, where he only needs to type the selected three ...
0
votes
0answers
80 views

How to mask attack a sha256 hash with following information using hashcat?

I am hashcat newbie and I want to crack a hash :) The answer is 1-15 (unknown) characters and it may contain 'a-z' 'A-Z' '0-9' and '_' . (A Twitter username) How may I mask attack a hash with above ...
0
votes
1answer
32 views

NMAP NSE script stopping after 900 seconds (15 minutes)

I am experimenting with ssh bruteforce over my home network using the ssh-brute nse script. I have a short list of usernames (just 12) but a long list of passwords (1M). I can't seem to get the ssh-...
1
vote
1answer
55 views

Manage Logs of Excessive Member and Server Authentication Failures

Currently, in our SIEM environment, we are attempting to reduce noise and any non-actionable items. One of the most frequent items we receive on a weekly basis is a report based on excessive member ...
38
votes
8answers
13k views

Is brute force a probable threat even if you enable CAPTCHA and rate limit logins?

Let's assume CAPTCHA is enabled with account lock out control (after five continuous failed attempts, the account will be locked for 15 min) on a system. Is brute force still a probable threat?
0
votes
1answer
289 views

Brute-Forcing DVWA login page with hydra

I'm learning how to brute force web login pages with a popular brute force tool called "Hydra". I'm using Kali Linux (VirtualBox) to do this. I've installed DVWA (Damn Vulnerable Web Application) and ...
1
vote
1answer
142 views

Are partial passwords a security improvement over full passwords?

With full password authentication, you need to enter the full password every time. With partial password authentication, you're asked for some subset of the password each time, and which characters ...
0
votes
1answer
70 views

Why are SQL servers not attacked as frequently as ssh servers?

I have a server running with both SSH and MySQL accessible to the public internet. Both run on default ports (22 and 3306). The ssh server is attacked by bots all the time. This is the output of ...
0
votes
0answers
27 views

Disconnect two Bluetooth connected devices [duplicate]

Suppose, two Bluetooth devices are connected in range. I know both their Bluetooth MAC addresses. Since these devices are constantly sending commands to each other, can't I just spoof on device's ...
1
vote
1answer
117 views

Lost password for encrypted external HD

Have an old filevault encrypted external hard drive. Would like to access but have forgotten the password. However I do remember the style of password (XKCD four word style) and remember two of the ...
1
vote
1answer
103 views

Slow Hashing Without a Salt?

I'm trying to design a security scheme that involves a shared secret but isn't a traditional account password situation. The server would store a set of "keys", each of which has a blob of data ...
1
vote
1answer
113 views

Please explain the vulnerability for the pre-shared Key for IKEv1 brute force IPSec

After the vulnerability was released for IPSec IKEv1 PSKs, our organization decided to increase the size and complexity of the PSK. However, upon releasing the new PSK we had a few issues: ...
0
votes
1answer
76 views

How is my employer accessing my router when employer's laptop is wirelessly connected to my home network

I have a modem bridged to a modern router running open source software and heavily secured. I have all connections to the router through a personal vpn from a dedicated provider. During work from home ...
0
votes
0answers
27 views

Best techniques for periodically creating very secured but easy to remember passwords [duplicate]

I need recommendations on techniques to creating highly secured, yet very easy to remember passwords. I need to create multiple passwords for personal accounts which must change periodically (every ...
1
vote
1answer
146 views

hashcat specific brute force

Is this scenario possible: I know the first three letters of the password (exact), i know the password is between 10-14 characters, i know the rest of the characters are "b,t,p,1,3,6,7" which can be ...
1
vote
1answer
636 views

Best tool to BruteForcing RDP

I have tried many tools and to do not seem to be successful with locking out an account I am testing on my network with an RDP domain. I used crowbar, ncrack and THC hydra but they don't seem to be ...
0
votes
1answer
117 views

Protect MySQL against brute-force attacks on dedicated CentOS 7 server

I have a database in a dedicated server (CentOS 7) setup by an external provider. I see a disgusting amount of brute-force attempts in MySQL log file every day. I know the best option would be to not ...
0
votes
1answer
131 views

Are there any good brute force programs in C#? [closed]

I'm planning to research & learn from brute force methods, but all the popular ones I found like John the Ripper or hashcat are written in C & OpenGL which I don't have much knowledge about so ...
0
votes
1answer
529 views

THC Hydra on Windows RDP Domain

I am testing a bruteforce on a windows rdp server within a domain. It seems to not be working because nothing is locking out the account I am targeting. How do you specify a domain username? I tried ...
2
votes
2answers
260 views

Breaking .kdb (KeePass 1.x) file

During a penetration testing lab, I have obtained access to a .kdb file of a KeePass 1.25 (password management). Therefore I tried to find a way to obtain the file key file or key and after ...
2
votes
0answers
150 views

Brute force hex password with exactly two special characters using JohnTheRipper

I want to optimize the way I'm using John the Ripper. I have a password with a know length (9) that consists only of (lower-case) hex characters and exactly two special characters. First I tried ...
0
votes
2answers
72 views

Cryptography as an ecosystem

I was thinking about a thought experiment. Let's imagine a world full of crackers such that whenever you encrypt something there will be someone who will try to crack your cryptographic key through ...
1
vote
1answer
96 views

Online brute force attack which will continue in background [closed]

I don't have enough bandwidth for brute force dictionary attacks so I'm searching for a website or a way that I can do brute force attacks as a background process even if I turn my internet ...
0
votes
1answer
277 views

Is this possible to brute force 25 billions billions password in less than a month?

i'm using Hashcat for a while & try to solve this challenge: is this possible to crack at least half the possibilities combinations password of 10 character using 94 characters from keyboard with ...
2
votes
2answers
97 views

is there an upper limit on time to brute-force a password, based on acceptable login delay and hardware speed ratios?

Suppose a user uses a password to log in to their PC. When the user logs in, the PC applies a cryptographic function to the password and compares the ciphertext to the stored ciphertext of the known ...
0
votes
3answers
202 views

Brute forcing - How difficult?

I'm doing a research project and I have a question regarding how difficult it would be to brute force something. Say there is a piece of text - "My name is James" Removing the whitespaces yields "...
1
vote
1answer
129 views

Is it possible to specify multiple values for failure condition (F=) using Hydra?

I want to brute-force a site using Hydra (https-post-form) that I don't know valid login credentials for, so I cannot specify a value for success condition (S=). Failed logins result in a redirect ...
1
vote
2answers
98 views

Is something like fail2ban necessary for a rate-limited key-only (no password) ssh login?

As far as I understand, bruteforcing ssh is only attempted for passwords, not keys (barring edge cases where presumably the NSA wants to break in). So if a server has disabled (in addition to root ...
0
votes
1answer
354 views

How to configure hashcat to only hash fixed length passwords with N digits?

I know of mask and dictionary attacks. Using a mask attack, I specify the charset for each position in the password pattern, e.g., ?1?1?d?1?d?1?1?d, where ?1 := ?l?u?s. But how do I tell hashcat to ...
0
votes
1answer
334 views

Which hashcat hash mode is closest to that used by BitLocker?

I'm trying to get a hypothetical benchmark for the BitLocker hash mode if Hashcat would support it. Which (-m) mode is closest to BitLocker's latest/default algorithm? From Google searches I learned ...
1
vote
0answers
147 views

How to recover forgotten AES-256 password with bruce force?

The password was set on a flash drive using LaCie Private-Public for Windows 10. The password is 12 character long. For each character, I know if it is a number, special character, lower case letter ...
0
votes
0answers
48 views

John the Ripper, mask and rules [duplicate]

I have obtained a hash for a password that I know is 10 characters and contains lowercase, uppercase and numbers. No special chars. I have created the following incremental mode: [Incremental:myown] ...
90
votes
8answers
16k views

Can secret GET requests be brute forced? [duplicate]

Say, I have on my server a page or folder which I want to be secret. example.com/fdsafdsafdsfdsfdsafdrewrew.html or example.com/fdsafdsafdsfdsfdsafdrewrewaa34532543432/admin/index.html If the ...