All Questions
4 questions
0
votes
1
answer
429
views
What's stopping attackers from brute forcing SSH passwords over new sessions?
I know that when you attempt to log in to a device via SSH, upon inputting an incorrect password, you must wait several seconds before you get another attempt. This is obviously a deterrent against ...
- 246
0
votes
2
answers
8k
views
Fastest way to brute force SSH
I'm doing a CTF on vulnhub and I need to brute force SSH. I've got 6 usernames and 15.000.000 passwords to try so I'm brute-forcing with hydra by running
hydra -L users.txt -P $LIST/rockyou.txt -t 64 -...
3
votes
1
answer
962
views
Is logging into SSH with a 2048 bit SSH password less secure than logging in with a a 2048 bit private key? [duplicate]
I'm certainly not saying this is a "good idea," and I always disable password authentication on SSH servers. However, the question came up when talking to a friend: If your password is as long and ...
- 515
10
votes
4
answers
5k
views
Can ssh keyfile security be broken in a few hours if the file is exposed?
At this link there is a claim that if an RSA key has a strong passphrase security might be broken in a few hours if an attacker has the private key.
Is there something weak about the security of RSA ...
- 953