Questions tagged [brute-force]

An attack using every possible input to attempt to produce the correct output. Typically the method of last resort when no weakness allows the use of a more restricted input set. E.g. trying all possible (or likely) passwords, in an attempt to guess the correct one.

60 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5
votes
0answers
586 views

How rf remotes for “cloning” rolling code find matching codes?

I've been tinkering with a rf (garage door) remote control that has a scanner mode (google JMA SR-48 for details). This mode works for Mutancode and Erreka which I assume would be similar to KeeLoq. ...
4
votes
0answers
497 views

Hydra - all passwords work

I want to test some mechanisms of my website when the password of a single user is entered a lot of times in a short time incorrectly in the login form. Therefore I got Hydra (for windows) on GitHub. ...
3
votes
0answers
825 views

Hydra does not display the right answer in DVWA

I have been trying for days now to use Hydra in an attempt to crack DVWA brute force but to no avail, I am using the correct session cookie and to my knowledge have the correct syntax? Query is: ...
3
votes
0answers
755 views

Are enterprises Office 365 accounts overly exposed to brute force attacks?

Earlier this year the Scottish parliament was attacked by what described as a “Brute Force” cyber-attack. It was said that the attack targeted “MSPs and staff with parliamentary email addresses”. ...
3
votes
0answers
3k views

Intercepting hydra with burp suite

I'm using burp suite as a proxy and when I run hydra, burp suite should be able to catch that and log it in HTTP history, but instead of that I get the error Can not connect [unreachable] I tried ...
2
votes
0answers
89 views

Bruteforce https post using single tcp connection

So I've tried bruteforcing my server using thc-hydra's https-post-form, but it floods the server very quickly and the requests start timing out. However, If I go through the browser where the HTTP ...
2
votes
1answer
163 views

Centralized brute force login detection using netflow data

Is brute force login detection feasible with netflow data? With the netflow data one could check the number of incoming packets to a specific destination port (for each flow). If the number is below a ...
2
votes
0answers
871 views

Brute force hex password with exactly two special characters using JohnTheRipper

I want to optimize the way I'm using John the Ripper. I have a password with a know length (9) that consists only of (lower-case) hex characters and exactly two special characters. First I tried ...
2
votes
0answers
1k views

Hydra hangs after 16 attempts

When I try to brute-force my router's admin page, Hydra is never making more than 16 attempts. After 16 attacks I receive only status updates with less and less tries per minute. Beside that, all ...
1
vote
0answers
95 views

Hardware for password cracking

I'm planning to extend my pentest services to Password Cracking, to be more precise: Cracking Active Directory Passwords, extracted from the customers Active Directory in order to check users ...
1
vote
0answers
49 views

Preventing BFAs in website login forms without Rate limiting, Captcha or Two factor authentication

I have the problem that in my particular Content Management System (CMS), preventing BFAs in website login forms without Rate limiting, Captcha or Two factor authentication isn't ready out of box or ...
1
vote
0answers
60 views

Brute force ssh login attempt on AWS t2.micro

I have some confusion in understanding the security groups itself i guess. The login attempts are being made to different ports , here are the logs Jan 08 00:00:13 ip-172-31-10-252 sshd[6067]: ...
1
vote
0answers
28 views

Can I read environment process variables of a react client in a browser?

I'm currently doing a pentest for a client and I've come across something new to me. When I log in, I view the username/password values in burpsuite and find they are encrypted using Cryptojs. I'm ...
1
vote
0answers
50 views

OWASP ZAP bruteforce 3 parameters Request from 3 payloads (parallel)

How I can fuzz a request with 3 parameters (locations) and 3 payloads: request1 => parameter1=payload1.1; parameter2=payload2.1; parameter3=payload3.1; request2 => ...
1
vote
0answers
228 views

Why does THC Hydra and Medusa give false positives when used on TP-Link Netcam?

One of the tests I carried out was brute-forcing. I already knew what the username and password was for a factory reset IP Netcam but wanted to see how it would work in practice and if it even worked ...
1
vote
0answers
126 views

Blocking URL brute-forcing on my server

Every day my server receives many GET requests in search of security holes. In other words, they are trying a list of words in search of a hole. for example: http://myapp.com/phpmyadmin http://...
1
vote
0answers
533 views

Hydra - Brute force command is stalling

Very new to application testing here. I am working through the hacker101 CTF (petshop) examples and I am having problems with brute forcing a username form with Hydra. The error message looks like it ...
1
vote
0answers
330 views

Preventing Linux brute force concurrent su/sudo attempts

Its well known that popular Linux distros use the PAM default to slightly delay incorrect login attempts, thus mitigating brute-force attacks against a user account (for example, running su repeatedly ...
1
vote
0answers
59 views

PEAP MS-CHAPv2 brute force attack

I have a 802.1x switch and a client authenticated using PEAP-MS-CHAPv2. I sniffed the traffic using a HUB between the client and the switch. How can I use the captured informations to perform a brute-...
1
vote
1answer
189 views

Bruteforcing via port 88 on MacOS

Macos has open port 88 by default. Is it possible to check validity of the password via this port from Linux and how? If the vncserver is active, it is possible to know also the username (by ...
1
vote
0answers
753 views

Can a smartphone's PIN or password be brute-forced in an offline attack?

I know of exhaustive offline dictionary and brute-force attacks against any given online account, but can the same method be applied against phones, either Android/iPhones? Or would any such attack be ...
1
vote
1answer
4k views

Brute-Forcing DVWA login page with hydra

I'm learning how to brute force web login pages with a popular brute force tool called "Hydra". I'm using Kali Linux (VirtualBox) to do this. I've installed DVWA (Damn Vulnerable Web Application) and ...
1
vote
0answers
508 views

How to recover forgotten AES-256 password with bruce force?

The password was set on a flash drive using LaCie Private-Public for Windows 10. The password is 12 character long. For each character, I know if it is a number, special character, lower case letter ...
1
vote
0answers
217 views

Using hydra on a website that has the same response for both a wrong and correct password

I got my hands on an old-ish residential gateway with SIP support and two analog phone connections. I want to use it for it's SIP support to use analog phones with my SIP provider. I didn't know the ...
1
vote
0answers
461 views

THC Hydra false positives on Foscam login

I bought a Foscam C1 Lite this week and I want to try to brute force the login page with THC hydra. But currently I am getting false positives with the following command: hydra -s 88 -l user -P ...
1
vote
0answers
818 views

Kerberos and brute-force attacks

Suppose that I am the administrator of a system that uses Kerberos and password authentication. How can I make brute-force attacks on user’s passwords by an attacker who can capture network traffic ...
1
vote
0answers
112 views

No fields captured in BurpSuite

I am using burpsuite to bruteforce my routers login form, but I have encountered an issue... When I enter something into the password field, BurpSuite shows the request, but not what was entered. For ...
1
vote
0answers
4k views

Brute Force with Hydra Ignore timeout and 4 billion limit

We are doing an assignment where we are hacking eachothers websites or servers in school. I know the default username and know the default password is 32 characters long to ssh in. While I know I ...
1
vote
0answers
1k views

Storing Social Security Numbers in a Database

I'm developing an online application that needs the user's social security number. The application won't be processed on the web server so I'll be using an asymmetric key. So a compromised web server ...
1
vote
0answers
2k views

Brute-Force/Dictionary attack against encypted file using PBKDF2 key derivation

I have been following this very useful post by Thomas. My use case is slightly different. I am developing a mobile application which requires some sensitive data to be stored on the device in a SQLite ...
1
vote
0answers
6k views

Linux Hydra issue - random correct password success

I have an issue with Hydra when I use it. I have tried the same command lines given in guides directly supported by the Damn Vulnerable Web Application (DVWA) v1.8. Ok so.. here is my attempt output....
1
vote
1answer
2k views

Distributed IMAP-Dictionary-Attack-Tool?

I have a client with a hacked IMAP-Account, and the attacker(s) made thousands of password-attempts, probably with a fixed set of passwords, from different IPs before they got in. After successful ...
0
votes
0answers
3 views

How can I add some probable Keywords to hashcat, so I can Brute-Force attack a WPA2 Network faster

so I´m trying to brute force attack a WPA2 Network with Hashcat and a wpa2.hccpax file, but when I do it says that it can take 45years to brute force it. So I had the idea that probably the network I´...
0
votes
0answers
83 views

Tool(s) for cracking insecure RSA keys

I have a 60-bit RSA public key and a file encrypted with it. Since RSA with keys under 256 bits should be crackable with even limited computational resources, is it possible to obtain the decrypted ...
0
votes
2answers
72 views

How to generate all possible combinations of a forgotten password

I have forgotten my password but I know the words used in the password. I remember the password was something like MyPassport@1.82TB. Is there any software that can produce all combinations like ...
0
votes
2answers
137 views

Hacking attemps from unkown source

I'm running a docker container in Kubernetes cluster running in aws, I exposed the container through LoadBalancer service and limited access to it just to my ip address using aws security groups, but ...
0
votes
0answers
105 views

Avast Remote Access Shield is blocking unknown remote access attempts to my computer (Win10) coming from a MacBook device on my LAN. [Confused]

I need help understanding what is happening on my LAN and determine if a malicious attack is taking place. The "attacks" started to occur for the first time last night. This morning, I open ...
0
votes
0answers
43 views

Find configured domains accepted by a reverse proxy

Context I am playing around with a machine from hack the box. I found what appears to be a squid v. 4.6 listening on port 3128. None of my requests works < HTTP/1.1 400 Bad Request < Server: ...
0
votes
1answer
118 views

SNMP Enumeration

I'm scanning a machine that has the UDP port 161 open and I'm not able to run snmpwalk against it as I'm returned with the error: Timeout: No Response from <IP> I tried to run the onesixtyone ...
0
votes
1answer
111 views

routersploit bruteforce cred attcack using http

while i'm trying to do a brutforce attack on my router using routersploit. Im getting the error rsf (HTTP Basic/Digest Bruteforce) > run [*] Running module creds/generic/...
0
votes
0answers
73 views

Why can't Hash Suite list the username/hash pairs in my SAM file?

I recently started experimenting with Hash Suite Pro (v3.5.1). This is a Windows program that tests the security of password hashes. A problem that I'm already running into is that Hash Suite is ...
0
votes
0answers
386 views

wfuzz show --hs responses when it should hide it

Test site: http://testfire.net/login.jsp Error when login failed: Login Failed: We're sorry, but this username or password was not found in our system. Please try again. Web Form <form action="...
0
votes
0answers
1k views

Difference between gobuster and dirbuster in performance

The only difference I am aware, is of CLI vs GUI. But I am curious to know as to what is the difference in their performance and what are the additional features in one tool compared to another?
0
votes
0answers
99 views

Bruteforce different encodings

I have a hash $office$*2013*100000*256*16*664f9e0787392c2b1632d3947aaadee4*27dc7d029f76244a407acf9b5afa3740*ebbc055ae08124f6a6be81ef812da4fece16b2ad86eede3916d9cda15f71833f password: лl My wordlist:...
0
votes
0answers
48 views

Preventing automated attacks on Tokens without relying on Firewall or Network Infrastructure

Our concern is more on application side prevention automated attacks. Although the firewall does it part to help prevent this, it has been mandated in our development team's security practices that we ...
0
votes
1answer
394 views

Using Patator ssh_login module how can I get the output to show only on success

I have the following command: patator ssh_login host=<ip> port=<port> user=<user> password=FILE0 0=<path to pwdlist> I would like to output the success result only and not ...
0
votes
0answers
61 views

Is using “Signature Versioning” in Amazon S3 a secure way of selling ebooks?

I own an ecommerce platform that sells large (500 megabyte+) ebooks. To reduce server costs I am looking at hosting the ebooks on S3 and using Sendowl/ FetchApp to create the links to the downloads. ...
0
votes
0answers
75 views

Remote Desktop compromised

So roughly 2 weeks ago my Remote Desktop was compromised whilst I was actively interacting with my server via Rdp I was prompted with a disconnect status equal to “ Another user has connected to ...
0
votes
0answers
302 views

How long will it take to crack a hashed random string

If I generate 128 bit, 512 bit and 1024 bit random strings using either: A native rand() function (C, PHP, Python, etc) OpenSSL random bytes Hardware generated random number And hash the random ...
0
votes
1answer
1k views

What are the common features to identify Brute-Force attack from Apache log file?

There are various methods to find attack patterns for different types of attacks. Apache-scalp is one such tool, but the rule set is not available to find the brute-force attack pattern via regular ...