Questions tagged [brute-force]

An attack using every possible input to attempt to produce the correct output. Typically the method of last resort when no weakness allows the use of a more restricted input set. E.g. trying all possible (or likely) passwords, in an attempt to guess the correct one.

Filter by
Sorted by
Tagged with
-1
votes
0answers
57 views

Tool(s) for cracking insecure RSA keys

I have a 60-bit RSA public key and a file encrypted with it. Since RSA with keys under 256 bits should be crackable with even limited computational resources, is it possible to obtain the decrypted ...
0
votes
0answers
29 views

Bypassing Hydra's 4 billion password limit [duplicate]

I'm trying to get into my friend's email (he is okay with it, we discussed it) and I'm using Hydra, but it has a limit to its bruteforcing that I can't seem to bypass, does anyone know how I can?
0
votes
0answers
31 views

What determines maximum thread-count when using Bruteforce programs? [closed]

Background When using most brute-force tools, there is usually an option to set thread count. What is the maximum thread count we can set in those programs. Say gobuster a directory buster based in go ...
0
votes
1answer
2k views

Is it possible to guess cvv code from payment number and expiration dates?

If I am not wrong, visa is easy to guess cvv right? Let's say if I have 100,000 credit card numbers and expiration dates, it is possible to make daily 5 guesses. All cards with 5 the same gateway/...
0
votes
1answer
386 views

Using Patator ssh_login module how can I get the output to show only on success

I have the following command: patator ssh_login host=<ip> port=<port> user=<user> password=FILE0 0=<path to pwdlist> I would like to output the success result only and not ...
-1
votes
3answers
191 views

how do i find the number of possible keys / password to decrypt a plain text

I would like to know if there is any way to recover the plain-text of a message that's been encrypted with 55 rounds of the Caesar cipher, with a different (independently chosen) key for each round; I ...
0
votes
2answers
69 views

How to generate all possible combinations of a forgotten password

I have forgotten my password but I know the words used in the password. I remember the password was something like MyPassport@1.82TB. Is there any software that can produce all combinations like ...
2
votes
3answers
17k views

How would I brute-force a Bitlocker recovery key?

I have imaged a hard disk and used passware, but to no avail - it says Encryption key External key, and not the actual key. How do you think I would go about brute forcing it? Lets assume I had ...
5
votes
4answers
2k views

Having a list of hashes for the same password compromise the security of the password?

An attacker want's access to a specific account, he doesn't know the password. It's a high entropy password. +128bits The attacker has the hash for the password (Assuming OWASP suggested bcrypt with ...
2
votes
3answers
2k views

What prevents a coder from brute forcing a wifi?

I know that a coder is able to connect to a wifi through code so my question is: Is there anything that will make it difficult to brute force a wifi password?
0
votes
2answers
136 views

Hacking attemps from unkown source

I'm running a docker container in Kubernetes cluster running in aws, I exposed the container through LoadBalancer service and limited access to it just to my ip address using aws security groups, but ...
3
votes
3answers
30k views

How to setup GPU for Cracking WPA/WPA2?

I have a Dell N5110 15R Laptop that I'm planning to use for GPU based cracking of WPA/WPA2 passwords. The thing is, I'm not a really big fan of password dictionaries and rainbow tables, I'd rather ...
1
vote
1answer
121 views

Are bcrypt hashes safe enough if exposed?

Considering: A VERY motivated attacker, A large entropy password, as in 256bits¹ hashed in bcrypt (with recommended cost factor of 12), and Attacker knowledge of everything he might need (except the ...
0
votes
1answer
115 views

SNMP Enumeration

I'm scanning a machine that has the UDP port 161 open and I'm not able to run snmpwalk against it as I'm returned with the error: Timeout: No Response from <IP> I tried to run the onesixtyone ...
2
votes
1answer
163 views

Centralized brute force login detection using netflow data

Is brute force login detection feasible with netflow data? With the netflow data one could check the number of incoming packets to a specific destination port (for each flow). If the number is below a ...
100
votes
5answers
30k views

Someone is trying to brute-force(?) my private mail server… very… slowly… and with changing IPs

This has been going on for about 1-2 days now: heinzi@guybrush:~$ less /var/log/mail.log | grep '^Nov 27 .* postfix/submission.* warning' [...] Nov 27 03:36:16 guybrush postfix/submission/smtpd[7523]:...
0
votes
1answer
109 views

routersploit bruteforce cred attcack using http

while i'm trying to do a brutforce attack on my router using routersploit. Im getting the error rsf (HTTP Basic/Digest Bruteforce) > run [*] Running module creds/generic/...
1
vote
0answers
95 views

Hardware for password cracking

I'm planning to extend my pentest services to Password Cracking, to be more precise: Cracking Active Directory Passwords, extracted from the customers Active Directory in order to check users ...
0
votes
1answer
998 views

What are the common features to identify Brute-Force attack from Apache log file?

There are various methods to find attack patterns for different types of attacks. Apache-scalp is one such tool, but the rule set is not available to find the brute-force attack pattern via regular ...
2
votes
1answer
962 views

Pen test cell-phones

A customer has asked me to conduct a pen-test on the phones of their employees. The customer's target are the text messages within their employees phones. The text messages are stored on the SIM for ...
1
vote
1answer
67 views

In Hashcat, How to generate combinatior attacks consisting of more than two words (in lenght)?

I am trying to make a combinator attack using just one dictionary: word1 word2 word3 word4 word5 ... And would like to try all 4-words-length permutations separated by commas: word1,word2,word3,word4 ...
1
vote
1answer
55 views

Does knowing part of a passphrase for sure really mean that you can “disregard” that entire part when trying to crack it?

Alice bought 1 Bitcoin and encrypted her wallet.dat in Bitcoin Core. Samantha, Alice's friend, notices the Bitcoin price skyrocketing and, while Alice is in the bathroom, steals Alice's wallet.dat as ...
1
vote
1answer
118 views

Can you bruteforce a SSH password without alerting the server owner?

What happened? This is a live event that a friend of mine is working on, a company's systems were breached by a Threat Actor (TA), when the Cyber Sec company was called in and tried to regain access ...
1
vote
0answers
24 views

If and how security-oriented CDNs protect from BFAs? [duplicate]

I understand how some CDNs also suffice protection from DDoS attacks by distributing content serving via various machines instead just one machine so that distributed attacks on one machine become ...
7
votes
1answer
5k views

How to crack 10 digits with prefix password in John the Ripper?

I want to crack a password which pattern was 10 digits start with 0910 or 0912. So possible passwords would be e.g. 0910333444, 0910444566, 0912111222, 0912145632. How to configure the incremental ...
0
votes
2answers
58 views

Brute force without DOS'ing the server

How to conduct brute force tests for directory traversal or other operations that require trial and error without accidentally turning it into DOS attack? It comes to how much bandwidth a site is ...
2
votes
1answer
70 views

How can the passphrase matter besides the very most obvious patterns? [duplicate]

Let's say that my passphrase is: aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaapassword9 Yes, it looks ridiculous. But only because we already know it. An attacker, trying to brute-force their way into this ...
1
vote
0answers
49 views

Preventing BFAs in website login forms without Rate limiting, Captcha or Two factor authentication

I have the problem that in my particular Content Management System (CMS), preventing BFAs in website login forms without Rate limiting, Captcha or Two factor authentication isn't ready out of box or ...
3
votes
2answers
291 views

How secure is the getapassphrase.com approach to password generation?

getapassphrase.com is a website that generates passphrases. The user sets a complexity in bits, and the site spits out results like: liberal panda and ill asp decline young suit in Kansas or rowdy ...
1
vote
1answer
125 views

Is the Amazon S3 Pre-Signed URL protected from brute force attack?

I want to know that whether Amazon S3 Pre-Signed URL is protected from brute force attack. For example, if I am the only person who knows the Pre-signed URL, is it extremely unlikely that somebody use ...
2
votes
1answer
401 views

John The Ripper Error: No password hashes loaded when cracking a zip file in kali linux

I was practicing bruteforce attacks using John The Ripper. I want to crack a zip file. I obtained the hash and stored it in a zip file but when I attempt to crack the zip file it is giving me an error ...
1
vote
1answer
144 views

Is it possible to crack a laptop's encrypted hard disk?

In a talk about a lost or stolen laptop, it is said that: even with hard drive encryption, eventually they can crack these secrets But strong encryption is practically impossible to break. For ...
1
vote
4answers
229 views

What ways are there to populate web directory wordlists?

Background: as a pentester I often just get IP addresses where websites are hosted. Since sometimes DNS is not available or the client wants a black box test, getting to the actual hosted application ...
1
vote
1answer
187 views

Bruteforcing via port 88 on MacOS

Macos has open port 88 by default. Is it possible to check validity of the password via this port from Linux and how? If the vncserver is active, it is possible to know also the username (by ...
0
votes
0answers
69 views

Isn't this kind of password ultimately secure and insanely easy to remember? [duplicate]

Pick any dictionary word. Think of a number over 10 and below 20. Repeat the word as many times as the number, and end off with the same number (for example, "12"). Example: ...
-3
votes
1answer
91 views

How to choose a web path scanner? [closed]

There are many tools designed to brute force directories and files in webservers, for example: https://tools.kali.org/web-applications/dirbuster https://github.com/maurosoria/dirsearch https://github....
2
votes
4answers
7k views

How to prevent DirBuster to stop listing apache server side files

I have deployed a php project on apache. When I use DirBuster tool to scan my site, it lists all server side files. I want to stop this listing. I have modified the permission. When I give the less ...
1
vote
0answers
59 views

Brute force ssh login attempt on AWS t2.micro

I have some confusion in understanding the security groups itself i guess. The login attempts are being made to different ports , here are the logs Jan 08 00:00:13 ip-172-31-10-252 sshd[6067]: ...
1
vote
4answers
763 views

Securely establish and verify PIN over network

Is there a (relatively simple) protocol for setting up a (6-digit) PIN on a remote server, that also prevents those, who may get a DB dump from the server, from brute-forcing that PIN? Is PBKDF2 and ...
1
vote
1answer
4k views

Brute-Forcing DVWA login page with hydra

I'm learning how to brute force web login pages with a popular brute force tool called "Hydra". I'm using Kali Linux (VirtualBox) to do this. I've installed DVWA (Damn Vulnerable Web Application) and ...
32
votes
2answers
5k views

When could 256 bit encryption be brute forced?

Assuming quantum computing continues to improve and continues to perform like this: ... quantum computer completes 2.5-billion-year task in minutes is it reasonable to expect that 256 bit encryption ...
1
vote
3answers
11k views

Hydra returning incorrect passwords

I'm trying to bruteforce my own HTTPS website account through Hydra. Therefore, it is 100% legal. Hydra keeps producing tons of incorrect passwords. This is the code I use: hydra -v -V -l XXXXXX -x 6:...
2
votes
1answer
12k views

How to brute-force WPA-2 password of specific set of characters using oclHashcat?

I want to test oclHashcat on a WPA-2 PSK password of length 8 containing only characters in the set {a-z, A-Z, 0-9}. To do this I have already captured the handshake in a .cap file and converted it ...
0
votes
0answers
102 views

Avast Remote Access Shield is blocking unknown remote access attempts to my computer (Win10) coming from a MacBook device on my LAN. [Confused]

I need help understanding what is happening on my LAN and determine if a malicious attack is taking place. The "attacks" started to occur for the first time last night. This morning, I open ...
3
votes
1answer
115 views

Credit card form : Is it neccessary to obscure error messages?

I'm working on designing a credit card payment form whose core functionality is provided by a payment processing company ("upstream"). Upon some transaction errors the upstream returns the ...
1
vote
0answers
27 views

Can I read environment process variables of a react client in a browser?

I'm currently doing a pentest for a client and I've come across something new to me. When I log in, I view the username/password values in burpsuite and find they are encrypted using Cryptojs. I'm ...
2
votes
1answer
125 views

Is using Google Forms to share “passcode protected” information safe from brute force attacks?

I have recently seen many people use Google Forms as a way of sharing “passcode protected” information. They seem to have the first section of the form with a required field asking for a short piece ...
0
votes
1answer
89 views

Smaller password lists [closed]

I hack wifi passwords with kali linux on airmon-ng and I make always password lists with crunch but the lists are always too long (I'm talking about <100 PT) and I want to know if is there a ...
2
votes
2answers
1k views

Are partial passwords a security improvement over full passwords?

With full password authentication, you need to enter the full password every time. With partial password authentication, you're asked for some subset of the password each time, and which characters ...
6
votes
2answers
2k views

How much faster does a GPU or FPGA crack an RSA key compared to a CPU?

Are there any significant speed up in time on cracking an RSA key (either brute-force or factoring with general number field sieve) using a GPA or FPGA compared to a CPU? If there is a speed advantage,...

1
2 3 4 5
15