Skip to main content

Questions tagged [brute-force]

An attack using every possible input to attempt to produce the correct output. Typically the method of last resort when no weakness allows the use of a more restricted input set. E.g. trying all possible (or likely) passwords, in an attempt to guess the correct one.

74 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5 votes
0 answers
722 views

Hydra - all passwords work

I want to test some mechanisms of my website when the password of a single user is entered a lot of times in a short time incorrectly in the login form. Therefore I got Hydra (for windows) on GitHub. ...
mosquito87's user avatar
5 votes
0 answers
775 views

How rf remotes for "cloning" rolling code find matching codes?

I've been tinkering with a rf (garage door) remote control that has a scanner mode (google JMA SR-48 for details). This mode works for Mutancode and Erreka which I assume would be similar to KeeLoq. ...
Artur Kedzior's user avatar
3 votes
1 answer
387 views

Centralized brute force login detection using netflow data

Is brute force login detection feasible with netflow data? With the netflow data one could check the number of incoming packets to a specific destination port (for each flow). If the number is below a ...
fitcfitcfatc's user avatar
3 votes
0 answers
2k views

Can a smartphone's PIN or password be brute-forced in an offline attack?

I know of exhaustive offline dictionary and brute-force attacks against any given online account, but can the same method be applied against phones, either Android/iPhones? Or would any such attack be ...
nnad's user avatar
  • 31
3 votes
0 answers
1k views

Hydra does not display the right answer in DVWA

I have been trying for days now to use Hydra in an attempt to crack DVWA brute force but to no avail, I am using the correct session cookie and to my knowledge have the correct syntax? Query is: hydra ...
user avatar
3 votes
0 answers
832 views

Are enterprises Office 365 accounts overly exposed to brute force attacks?

Earlier this year the Scottish parliament was attacked by what described as a “Brute Force” cyber-attack. It was said that the attack targeted “MSPs and staff with parliamentary email addresses”. ...
TheJulyPlot's user avatar
  • 7,829
2 votes
0 answers
152 views

How to configure Windows Server 2012 Firewall to block this bot attack?

My Windows logs are flooded with what looks like a brute force attack on my machine. I want to be able to block these ports from the outside, but I'm not certain what service this is and what port ...
Swisher Sweet's user avatar
2 votes
0 answers
250 views

Bruteforce https post using single tcp connection

So I've tried bruteforcing my server using thc-hydra's https-post-form, but it floods the server very quickly and the requests start timing out. However, If I go through the browser where the HTTP ...
Sam's user avatar
  • 21
2 votes
0 answers
2k views

Brute force hex password with exactly two special characters using JohnTheRipper

I want to optimize the way I'm using John the Ripper. I have a password with a know length (9) that consists only of (lower-case) hex characters and exactly two special characters. First I tried ...
Norbert's user avatar
  • 121
2 votes
0 answers
5k views

Intercepting hydra with burp suite

I'm using burp suite as a proxy and when I run hydra, burp suite should be able to catch that and log it in HTTP history, but instead of that I get the error Can not connect [unreachable] I tried ...
Java-Kree's user avatar
  • 329
2 votes
0 answers
2k views

Hydra hangs after 16 attempts

When I try to brute-force my router's admin page, Hydra is never making more than 16 attempts. After 16 attacks I receive only status updates with less and less tries per minute. Beside that, all ...
Sudris's user avatar
  • 21
1 vote
1 answer
10k views

Why hydra showing this error [ERROR] could not connect to ssh://192.168.0.1:22?

I am using hydra to bruteforce my router admin page. By scanning with nmap it is showing port 22 ssh is open and when i use medusa it is bruteforcing properly but with hydra i am using this command : ...
Cophmat's user avatar
  • 11
1 vote
0 answers
2k views

Hydra brute force ssh usernames with given RSA key

On a machine supporting ssh, an RSA key is given but no username. My idea was brute-forcing the SSH username with Hydra but I didn't find any option to give the RSA key to Hydra. Is it possible to ...
UndercoverDog's user avatar
1 vote
1 answer
215 views

Unlisted directory discovery of a web server without using bruteforce attacks

Some creator I support on SubscribeStar hosts their files on a dedicated AWS web storage server of theirs and the names are easily accessible and sometimes guessable without any kind of security or ...
Matcha's user avatar
  • 111
1 vote
0 answers
240 views

"john --format=axcrypt" is not returning results

I would like to open a mysterious old file that I found on my Hard Disk, the contents of which I do not know nor can I guess from its name (PB-mp4-rar.axx). The file was password-protected with the ...
user avatar
1 vote
0 answers
224 views

How to limit number strings with crunch

I'm currently trying to generate a very specific word list. The words generated should go like this: crunch 9 9 -t @%%%%%%,,-o test.txt But one of the constraints that I have given myself is that the ...
AyaBLA's user avatar
  • 11
1 vote
0 answers
762 views

Brute forcing the brute force page on DVWA v1.0.7 using hydra

I am trying to brute force the brute force log-in page on DVWA v1.0.7 (/dvwa/vulnerabilities/brute/) I have been working on this for quite some time but I keep getting a bunch of false positives when ...
lexy Odiwe's user avatar
1 vote
0 answers
528 views

How many random characters must an unguessable string contain?

I want to add a suffix to my URLs that makes them distinctive and therefore only findable by a person who knows that suffix. I considered using a UUID or hash, but these are usually very long. However,...
F.M.F.'s user avatar
  • 127
1 vote
0 answers
170 views

Shamir secret sharing, is security reduced by chunking a secret into smaller blocks?

When using Shamir's secret sharing algorithm one has to define the size for the finite field over which the secret is split. I came across a few implementations, like secrets.js-lit, and as far as I ...
Gamer2015's user avatar
  • 727
1 vote
0 answers
427 views

Tool(s) for cracking insecure RSA keys

I have a 60-bit RSA public key and a file encrypted with it. Since RSA with keys under 256 bits should be crackable with even limited computational resources, is it possible to obtain the decrypted ...
user23456's user avatar
1 vote
0 answers
540 views

Hardware for password cracking

I'm planning to extend my pentest services to Password Cracking, to be more precise: Cracking Active Directory Passwords, extracted from the customers Active Directory in order to check users ...
nameless's user avatar
  • 129
1 vote
0 answers
141 views

Preventing BFAs in website login forms without Rate limiting, Captcha or Two factor authentication

I have the problem that in my particular Content Management System (CMS), preventing BFAs in website login forms without Rate limiting, Captcha or Two factor authentication isn't ready out of box or ...
Semo's user avatar
  • 11
1 vote
0 answers
223 views

Brute force ssh login attempt on AWS t2.micro

I have some confusion in understanding the security groups itself i guess. The login attempts are being made to different ports , here are the logs Jan 08 00:00:13 ip-172-31-10-252 sshd[6067]: ...
ArjunDandagi's user avatar
1 vote
0 answers
175 views

Can I read environment process variables of a react client in a browser?

I'm currently doing a pentest for a client and I've come across something new to me. When I log in, I view the username/password values in burpsuite and find they are encrypted using Cryptojs. I'm ...
Crashie's user avatar
  • 23
1 vote
1 answer
518 views

SNMP Enumeration

I'm scanning a machine that has the UDP port 161 open and I'm not able to run snmpwalk against it as I'm returned with the error: Timeout: No Response from <IP> I tried to run the onesixtyone ...
1afx0's user avatar
  • 11
1 vote
0 answers
168 views

OWASP ZAP bruteforce 3 parameters Request from 3 payloads (parallel)

How I can fuzz a request with 3 parameters (locations) and 3 payloads: request1 => parameter1=payload1.1; parameter2=payload2.1; parameter3=payload3.1; request2 => ...
KirillPutchenko's user avatar
1 vote
0 answers
808 views

Why does THC Hydra and Medusa give false positives when used on TP-Link Netcam?

One of the tests I carried out was brute-forcing. I already knew what the username and password was for a factory reset IP Netcam but wanted to see how it would work in practice and if it even worked ...
StaticJ's user avatar
  • 11
1 vote
0 answers
343 views

Blocking URL brute-forcing on my server

Every day my server receives many GET requests in search of security holes. In other words, they are trying a list of words in search of a hole. for example: http://myapp.com/phpmyadmin http://...
icy's user avatar
  • 111
1 vote
0 answers
965 views

Hydra - Brute force command is stalling

Very new to application testing here. I am working through the hacker101 CTF (petshop) examples and I am having problems with brute forcing a username form with Hydra. The error message looks like it ...
konk's user avatar
  • 11
1 vote
0 answers
893 views

Preventing Linux brute force concurrent su/sudo attempts

Its well known that popular Linux distros use the PAM default to slightly delay incorrect login attempts, thus mitigating brute-force attacks against a user account (for example, running su repeatedly ...
tasket's user avatar
  • 301
1 vote
0 answers
212 views

PEAP MS-CHAPv2 brute force attack

I have a 802.1x switch and a client authenticated using PEAP-MS-CHAPv2. I sniffed the traffic using a HUB between the client and the switch. How can I use the captured informations to perform a brute-...
lbat's user avatar
  • 11
1 vote
0 answers
984 views

How to mask attack a sha256 hash with following information using hashcat?

I am hashcat newbie and I want to crack a hash :) The answer is 1-15 (unknown) characters and it may contain 'a-z' 'A-Z' '0-9' and '_' . (A Twitter username) How may I mask attack a hash with above ...
user avatar
1 vote
0 answers
760 views

How to recover forgotten AES-256 password with bruce force?

The password was set on a flash drive using LaCie Private-Public for Windows 10. The password is 12 character long. For each character, I know if it is a number, special character, lower case letter ...
6502guy's user avatar
  • 11
1 vote
0 answers
467 views

Using hydra on a website that has the same response for both a wrong and correct password

I got my hands on an old-ish residential gateway with SIP support and two analog phone connections. I want to use it for it's SIP support to use analog phones with my SIP provider. I didn't know the ...
SolderSmoke's user avatar
1 vote
0 answers
646 views

THC Hydra false positives on Foscam login

I bought a Foscam C1 Lite this week and I want to try to brute force the login page with THC hydra. But currently I am getting false positives with the following command: hydra -s 88 -l user -P ...
ZerOne's user avatar
  • 111
1 vote
0 answers
996 views

Kerberos and brute-force attacks

Suppose that I am the administrator of a system that uses Kerberos and password authentication. How can I make brute-force attacks on user’s passwords by an attacker who can capture network traffic ...
Demi's user avatar
  • 889
1 vote
0 answers
193 views

No fields captured in BurpSuite

I am using burpsuite to bruteforce my routers login form, but I have encountered an issue... When I enter something into the password field, BurpSuite shows the request, but not what was entered. For ...
Python's user avatar
  • 121
1 vote
0 answers
5k views

Brute Force with Hydra Ignore timeout and 4 billion limit

We are doing an assignment where we are hacking eachothers websites or servers in school. I know the default username and know the default password is 32 characters long to ssh in. While I know I ...
TheMangaStand's user avatar
1 vote
0 answers
2k views

Storing Social Security Numbers in a Database

I'm developing an online application that needs the user's social security number. The application won't be processed on the web server so I'll be using an asymmetric key. So a compromised web server ...
harlyd's user avatar
  • 11
1 vote
0 answers
3k views

Brute-Force/Dictionary attack against encypted file using PBKDF2 key derivation

I have been following this very useful post by Thomas. My use case is slightly different. I am developing a mobile application which requires some sensitive data to be stored on the device in a SQLite ...
Taha's user avatar
  • 121
1 vote
0 answers
6k views

Linux Hydra issue - random correct password success

I have an issue with Hydra when I use it. I have tried the same command lines given in guides directly supported by the Damn Vulnerable Web Application (DVWA) v1.8. Ok so.. here is my attempt output....
Daniel's user avatar
  • 195
1 vote
1 answer
2k views

Distributed IMAP-Dictionary-Attack-Tool?

I have a client with a hacked IMAP-Account, and the attacker(s) made thousands of password-attempts, probably with a fixed set of passwords, from different IPs before they got in. After successful ...
that guy from over there's user avatar
0 votes
0 answers
92 views

John the Ripper not working properly

I am new to JTR and am currently trying to crack some passworts I generated. Because I am new to JTR, I wanted to start by hashing a simple password like "Cat", write it in a file named pw....
darquis's user avatar
0 votes
0 answers
104 views

Hydra says different passwords with are correct each run, but only one works

I am doing CTF 'Skynet' from THM and came across this problem. Enumerating SMB, I gathered credentials 'milesdyson' and a list of passwords 'log1.txt'. I figured that I could try to brute force ...
Juan Vega Seco's user avatar
0 votes
0 answers
144 views

Cracking 1000-password assignment from hashed file

OS: Ubuntu 20.04 on VMWare, tool: John the ripper The whole system is up-to-date The file has 1000 hashed passwords. There are 40 rules provided, a small word list is provided to help crack part of ...
nooonamee's user avatar
0 votes
1 answer
122 views

FFUF command returns status code 400, regardless of mode option: clusterbomb, pitchfork, sniper

I'm working on a lab on PortSwigger.com titled Username enumeration via different responses. While using ffuf to solve the lab, the output keeps returning a 400 status code. So far this is what I've ...
Майкл Шодеке's user avatar
0 votes
0 answers
505 views

How can I understand the zip2john hash format?

I had a .zip file that was apparently encrypted with AES-256 deflate. 7z l -slt archive.zip | grep Method Method = AES-256 Deflate Then I used zip2john to get a "hash" out of it: archive....
IRP_HANDLER's user avatar
0 votes
0 answers
150 views

Brute-Force by using XAMPP on windows, Ubuntu installed in Windows and DVWA

I am currently using XAMPP installed on windows to do a brute-force attack to DVWA. The command prompt that I used is Ubuntu, but the virtual machine is not opened and installed. Just a command prompt ...
Code Nauh's user avatar
0 votes
0 answers
148 views

Brute force copy of PKI root certificates

If an attacker wants to create a phishing website with a fake TLS certificate, to my noob mind, there is a way to do this: Create the fake website certificate Create the hash for this certificate ...
Martijn's user avatar
  • 51
0 votes
0 answers
1k views

Hydra and Telnet bruteforcing

To preface this I have full permission to do anything I want to any service I can find on this network as it's part of a course I'm doing in Ethical Hacking. I also want to mention that I'm quite the ...
GooseLee33's user avatar