Questions tagged [brute-force]

An attack using every possible input to attempt to produce the correct output. Typically the method of last resort when no weakness allows the use of a more restricted input set. E.g. trying all possible (or likely) passwords, in an attempt to guess the correct one.

Filter by
Sorted by
Tagged with
1
vote
0answers
30 views

OWASP ZAP bruteforce 3 parameters Request from 3 payloads (parallel)

How I can fuzz a request with 3 parameters (locations) and 3 payloads: request1 => parameter1=payload1.1; parameter2=payload2.1; parameter3=payload3.1; request2 => ...
0
votes
1answer
61 views

Security of PHP's str_shuffle()

I'm doing some research on PHP's str_shuffle function, I already asked this question multiply times on StackOverflow but got no answer https://stackoverflow.com/questions/61968859/is-it-possible-to-...
1
vote
1answer
109 views

Chance of guessing any valid credit card data

What's the chance of guessing valid credit card data that could be used to make a payment online? To me, it looks like it's not extremely hard to guess, but I'm not able to calculate the probability. ...
0
votes
1answer
56 views

Hydra brute-force login with a timestamp

I am attempting to run a brute-force attack on my router just as a proof of concept and have hit a problem in that the POST request requires a parameter of the current timestamp. Here is my current ...
2
votes
1answer
76 views

How does Amazon secure its 6 digit one-time password?

I noticed that Amazon's password reset relies on a 6 digit numeric PIN. Doesn't this reduce every user's account to a 1 in 10^5~ chance of being accessed through brute force guess factoring in a few ...
0
votes
0answers
41 views

Why can't Hash Suite list the username/hash pairs in my SAM file?

I recently started experimenting with Hash Suite Pro (v3.5.1). This is a Windows program that tests the security of password hashes. A problem that I'm already running into is that Hash Suite is ...
0
votes
1answer
20 views

wfuzz default number of connects in parallel per target?

In Hydra, default number of connects in parallel per target is 16 and it can be changed with -t flag. E.g. -t 100 for 100 connection in parallel per target. wolf@linux:~$ hydra -h | grep parallel -...
0
votes
0answers
62 views

wfuzz show --hs responses when it should hide it

Test site: http://testfire.net/login.jsp Error when login failed: Login Failed: We're sorry, but this username or password was not found in our system. Please try again. Web Form <form action="...
2
votes
2answers
76 views

Is single iteration SHA-256 safe enough for hashing 128bit random number API keys?

I implemented this kind of authentication for my REST API, is this secure and is my logic sound? I am primarily curious about the SHA-256 hash & iterations = 1 aspect. I have omitted some details ...
0
votes
1answer
59 views

how do i find the number of possible keys / password to decrypt a plain text

i like to know if there is any way to decrypt a plain-text that is encrypted 55 rounds using Caesar ciphers with different key for each round. and using brute force attack without knowing the length ...
2
votes
2answers
323 views

Is it feasible to recover a zip file password consisting of about 16 digits?

A friend of mine lost the password of a zip file of her. She remembers that the password contains digits only (that is, only 0, 1, 2, 3, 4, 5, 6, 7, 8, and 9) and is 16 characters long or so. The ...
0
votes
1answer
109 views

Is it possible to guess cvv code from payment number and expiration dates?

If I am not wrong, visa is easy to guess cvv right? Let's say if I have 100,000 credit card numbers and expiration dates, it is possible to make daily 5 guesses. All cards with 5 the same gateway/...
0
votes
0answers
120 views

Difference between gobuster and dirbuster in performance

The only difference I am aware, is of CLI vs GUI. But I am curious to know as to what is the difference in their performance and what are the additional features in one tool compared to another?
1
vote
0answers
47 views

Why does THC Hydra and Medusa give false positives when used on TP-Link Netcam?

One of the tests I carried out was brute-forcing. I already knew what the username and password was for a factory reset IP Netcam but wanted to see how it would work in practice and if it even worked ...
0
votes
1answer
79 views

Getting encrypted password

I have seen many hackers bruteforce password for gaining access to social media. In famous Mr Robot series it is shown that Elliot(main character) brute forces people and the password is displayed on ...
0
votes
1answer
84 views

Bruteforce all IP addresses on network with Hydra

I have been tasked to pen test a computer on my network. I have done some social engineering to get the username and password of the device, and I know ssh is open on the computer. However, I do not ...
1
vote
4answers
121 views

Prevent subscription ID guessing

I am working on a service which offers information on the road traffic situation. Users can subscribe to the service via an API, indicating the area and road classes they are interested in, and are ...
67
votes
4answers
14k views

How did the brute-forcers get my IP address so quickly?

This is probably a massive noob question, but Google results aren’t being helpful and I couldn’t find something specific here. I made this server that just hosts IRC, HTTP and SSH for some friends. I ...
0
votes
1answer
107 views

How does winrar know I typed the right key?

As far as I know WinRar uses the password you type and derives the key from it. But how exactly does it check if the key I typed is correct? What I think is that it compares your guess with the right ...
1
vote
1answer
75 views

How can one mitigate both account-level DOS attacks and online brute force attacks at the same time?

I was recently reading this question, where the accepted answer claims that it is easy for attackers to bypass rate limiting that is based on IP, which makes any sort of IP rate limiting to prevent a ...
0
votes
0answers
14 views

Tool to try and brute force decrypt a string by trying common algorithms? [duplicate]

I've got a string that I believe is encoded with a rather basic algorithm, but rather than trying them all 1 by 1 I'm wondering if there's a tool/website that can attempt to decode it using multiple ...
0
votes
0answers
132 views

Hydra Brute-force attack on Gitlab doesn't work!

I'm using hydra to test my organization's security since our GitLab is accessible online, I wanted to make sure the security of the login itself before implementing other types of security measure (e....
0
votes
0answers
72 views

Bruteforce different encodings

I have a hash $office$*2013*100000*256*16*664f9e0787392c2b1632d3947aaadee4*27dc7d029f76244a407acf9b5afa3740*ebbc055ae08124f6a6be81ef812da4fece16b2ad86eede3916d9cda15f71833f password: лl My wordlist:...
1
vote
0answers
21 views

Name of 'smart brute force' attack against sequential cipher lock [duplicate]

I remember learning about an attack against sequential cipher locks - ones that don't have a 'reset' or 'enter', you just enter digits and as soon as the last n consecutive entries match, the lock ...
0
votes
0answers
43 views

Preventing automated attacks on Tokens without relying on Firewall or Network Infrastructure

Our concern is more on application side prevention automated attacks. Although the firewall does it part to help prevent this, it has been mandated in our development team's security practices that we ...
34
votes
5answers
6k views

Does it matter if a brute force search for a password returns a collision and not the password?

Assume the following very basic hashing algorithm. h(k) = k mod 17 Let's say we create a password 12345 for a website that uses this very basic hashing algorithm. That would yield the hash of 3. ...
0
votes
1answer
111 views

Using Patator ssh_login module how can I get the output to show only on success

I have the following command: patator ssh_login host=<ip> port=<port> user=<user> password=FILE0 0=<path to pwdlist> I would like to output the success result only and not ...
3
votes
2answers
129 views

Solution for password spraying on my app

We have a web application where the input fields for login are: username and password. In order to prevent brute force attacks, we have implemented a lockout function for 5 invalid tries of valid ...
-1
votes
1answer
67 views

find out unprotected commonly used subdirectories

I try to solve a pentesting challenge where I have to find out a directory, which is unprotected from directory listing. I tried to find it with wfuzz -c -z file,'wordlist.txt' --hc 404 http://...
2
votes
2answers
853 views

dictionary attack hashing algorithm

Does the kind of algorithm used to hash passwords have any advantages or disadvantages in a dictionary attack? i.e. SHA256, MD5, etc. or is it just the dictionary that is used by the attacker matters? ...
1
vote
1answer
319 views

Hydra hangs after attempts or returns all passwords valid

I'm using the Hydra tool on Kali Linux 2020.1 and I'm trying to brute force a login at hack.me http://s123056-104737-qer.sipontum.hack.me/login.php. My problem is that whenever I run Hydra it gets ...
-3
votes
1answer
146 views

Bruteforcing a Wi-FI password [closed]

Is it possible to brute-force a WiFi password, since technically there are no limits with login attempts? If there is any, the MAC address of the attacker device can be changed.
0
votes
1answer
79 views

Account lockout for inexistant accounts

I am starting to implement an exponential backoff system to lockout accounts after a certain amount of failed attempts (1min after 5 fails, 2min after 10 fails, etc.). However, as this source suggests,...
0
votes
1answer
100 views

Can bruteforce attacks be prevented with tables of valid inputs?

Can this method of encryption prevent bruteforce attacks? If I had a hypothetical table (or function) where every grammatically valid sentence (limited to some number of words) was given an ...
2
votes
1answer
186 views

Hydra HTTP Form Post with parameters containing a colon “:”

I'm trying to brute force login on my domain using THC Hydra v9.1-dev. It is using an ASP.net form and some of the required post body parameters contain a colon : in them which is the separator used ...
2
votes
1answer
221 views

Is better to have as password a sentence or first letter of the sentence?

Which is better master KeePass password to prevent any type of bruteforce between theses two type of password : Complete sentence invented by user like : I like cheeseburger, tomatoes and fries ! :) ...
0
votes
1answer
335 views

How to prevent Directory Enumeration Attacks (DirB or Directory Buster)

I am dabbling in pen testing (OWASP Juice Shop) and I realized many web application attacks start from enumeration where the attacker uses DirB to find vulnerable Web Objects or Directories to attack ...
0
votes
0answers
46 views

Is using “Signature Versioning” in Amazon S3 a secure way of selling ebooks?

I own an ecommerce platform that sells large (500 megabyte+) ebooks. To reduce server costs I am looking at hosting the ebooks on S3 and using Sendowl/ FetchApp to create the links to the downloads. ...
-1
votes
2answers
172 views

How secure is a 4 digit numbers only captcha? [closed]

How secure is a 4 digit numbers only captcha? How many tries will take to be able to bruteforce that captcha?
0
votes
0answers
60 views

What would be the algorithm that would be used to Brute Force Blowfish Encryption?

For my science fair project, I will be researching the algorithm for encrypting data using the Blowfish Encryption technique. Suppose I have a word I would like to encrypt using this method called "...
2
votes
1answer
53 views

WEP QOS_DATA vs DATA decryption - difference?

I recently played a bit with my hardware pocket size IV WEP sniffer. It's a 5v tool that i use in my lab when bored: https://www.youtube.com/watch?v=jJyRaWrnbJg In my tests i figured out one of my ...
0
votes
0answers
52 views

Is the WPS implementation for Wifi Direct on Amazon Fire Stick secure?

Specifically: Does the fire-stick use PIN method or push-button method for its Wifi Direct implementation? From my experience using the Fire Stick for mirroring an Android phone, I would guess it is ...
1
vote
0answers
97 views

Blocking URL brute-forcing on my server

Every day my server receives many GET requests in search of security holes. In other words, they are trying a list of words in search of a hole. for example: http://myapp.com/phpmyadmin http://...
1
vote
1answer
84 views

Protect Wordpress against ddos attack [closed]

The above screenshot is from my website's cpanel visitors list.My website is build on wordpress. And I think someone is trying hard to crack open my website with DDOS attack and drain out my 10gb ...
6
votes
1answer
518 views

Securely displaying hidden integers with MD5

A system I'm studying uses the following mechanism: a 19-digit integer is hashed via the MD5 algorithm and the salt of the integer is shown in plain sight to the user before they take an irreversible ...
1
vote
0answers
263 views

Hydra - Brute force command is stalling

Very new to application testing here. I am working through the hacker101 CTF (petshop) examples and I am having problems with brute forcing a username form with Hydra. The error message looks like it ...
0
votes
0answers
88 views

Bruteforce directory with Burp : 2 parameters used in 3 step macro for intruder

I try to bruteforce paths with Burp intruder but to do so I have to be authenticated and have a valid CSRF token (transmitted as a GET parameter). So what I want to do is : Call the login page to ...
2
votes
0answers
70 views

Bruteforce https post using single tcp connection

So I've tried bruteforcing my server using thc-hydra's https-post-form, but it floods the server very quickly and the requests start timing out. However, If I go through the browser where the HTTP ...
0
votes
1answer
37 views

UFW Blocks some IPs which are trying to attempt a connection to the server

UFW‌ Blocks some IPs which are trying to attempt a connection to the server. I checked most blocked IPs in abuseIPD website and all blocked IPs are reported for brute force attack and/Or ssh spamming ...
-1
votes
1answer
212 views

Spider (web scrawling) vs Force Browsing

I'm scanning websites with OWASP ZAP and noticed that the Spider attack and Force Browse attack return somewhat different results. What are the differences between Web Spiders (Web Crawlers) and ...

1
2 3 4 5
14