Questions tagged [password-cracking]

for questions relating to the cracking of passwords and the practices to mitigate against passwords being cracked.

Filter by
Sorted by
Tagged with
4 votes
1 answer
79 views

Why did Microsoft publish the CPassword AES key ca. 2012?

As outlined in Security Bulletin MS14-025, Microsoft acknowledges the way credentials had been stored in the group policy field "CPassword" is insecure and is not to be trusted any more. ...
user avatar
1 vote
2 answers
161 views

Is a very long and random password theoretically immune to password cracking?

Suppose a password’s stored hash is exposed in a theoretical mass security breach of a popular service given the following assumptions: The password is very long (30+ characters) The password uses a ...
user avatar
0 votes
0 answers
23 views

Storing app specific PINs on mobile devices for local authentication

Are there any best practices for storing app specific PINs (e.g. 6 digit PIN that isn't part of the device lock screen) on mobile devices (Android/iOS)? I know several banking and authenticator apps ...
user avatar
4 votes
1 answer
246 views

Creating a custom wordlist for MS Word

I have a Word document that is password protected. Am I wrong in assuming that if I know nothing about the password that it’s basically a waste of time trying to crack it? I do remember it’s two short ...
user avatar
  • 51
0 votes
0 answers
31 views

What are the underlying mechanics that make password salting an effective deterrent against Rainbow Tables? [duplicate]

I have a top level familiarity with Rainbow tables (1 ,2 ) I also understand that salting adds a randomly generated alphanumeric string to each password before it gets hashed and put in a database. My ...
user avatar
-1 votes
3 answers
162 views

Why are there often random email addresses in known password word lists?

In known wordlists like crackstation.lst there are random emails in the list. Why are they there?
user avatar
0 votes
0 answers
26 views

Are there some routers that have WPS, but without a fixed Pin?

My router only seems like to support the push button method, but I thought every router with wps has a fixed wps pin, or am I wrong?
user avatar
2 votes
1 answer
98 views

If multiple of the same password have the same hashed value in a database, does that mean the password is not being salted?

I just started a new job last week and I'm asking for a sanity-check before I mention this to anyone. All the new employee accounts are created with the same default password (I know, already a no-no)....
user avatar
6 votes
2 answers
2k views

Can you use an FPGA with hashcat?

Hashcat list FPGAs as opencl device type in its help. - [ OpenCL Device Types ] - # | Device Type ===+============= 1 | CPU 2 | GPU 3 | FPGA, DSP, Co-Processor So can you really somehow connect and ...
user avatar
1 vote
0 answers
85 views

Need help cracking a MacOS Catalina password

I have found the hashes for the stored passwords on my mac, I do not have the administrator passwords, I do have the hashes coming from the /var folder. I have tried decrypting it using hashcat but it ...
user avatar
0 votes
1 answer
82 views

Is it possible to design a system with two passwords?

Is it possible to design a system with two passwords prompts? The system will have to prompt for two passwords The system would have to validate first password before prompting for second password ...
user avatar
0 votes
1 answer
129 views

Hashcat brute force - markov chains

Hashcat uses Markov chains by default when using brute force mode. Do they really speed up the cracking since a randomly generated password normally has the same probability for every combination?
user avatar
20 votes
2 answers
5k views

Shouldn’t patterns be just as secure as PINs?

I’ve seen multiple sources online that say that unlock patterns are less safe than ‘random’ PINs. I was thinking; how come? From what I see, they would both be just as secure; you chose different ...
user avatar
  • 303
0 votes
1 answer
49 views

What format is this, is it salted, how to solve for salt? [closed]

I am using a third party app which stores tokens inside of a mysql db. I need to confirm the tokens but there is no easy way to get the actual values from the DB due to the interface. Long story short,...
user avatar
  • 103
7 votes
1 answer
2k views

With password cracking, what is the fastest known password cracking rig in hashes per second? [closed]

To properly assess password strength, I have been trying to research what the fastest known password cracking rig is in hashes per second. HashCat claims that their software is the world's fastest, ...
user avatar
1 vote
0 answers
43 views

Attack on home dir encryption with sddm pam_mount by using password in /etc/shadow

I'm using Debian + sddm + KDE with ONLY home directory encrypted with gocryptfs. Decrypting is performed with gocryptfs as follows: PC boots as usual and starts the sddm service I enter my login ...
user avatar
0 votes
1 answer
42 views

SCrypt's goal and the role its salt plays

Am I right in stating that SCrypt as an algorithm is useful where many passwords are stored in a database, but not against one specific encryption key derived from one password of one user? For ...
user avatar
0 votes
1 answer
114 views

Using John or hashcat when password stub is leaked by weak crypto

I'm pentesting a system (call it X) which uses an internal secret key. Due to weaknesses in the crypto, I can determine: The SHA1 hash of the key (stored as a checksum) With high probability, the ...
user avatar
0 votes
0 answers
50 views

Which password is more secure? [duplicate]

Which password is harder to guess/brute-force: onlysmallletters! Ez65);k And also, can you explain your answer?
user avatar
3 votes
1 answer
139 views

What does it cost to hack passwords in-terms of time and computation etc?

The below table is making its way around linkedin and I've seen similar before. Assuming this table is accurate enough I'd like to understand the economics of cracking the passwords. For example, if ...
user avatar
1 vote
1 answer
70 views

Data breach for my router in chrome

I have just logged into my router in Chrome, Win 10. I got this warning. I immediately changed the password. But I have several questions. Is the message reliable, in the sense that the breach ...
user avatar
0 votes
2 answers
80 views

Construct a strong, (almost) unique password? [duplicate]

After reading Why use random characters in passwords? it seems to me that one can solve the problem of how to remember a zillion passwords while each one remains secure by constructing each password ...
user avatar
1 vote
1 answer
95 views

In hashcat, is there a simple way to set the amount of symbols in the password?

For example, I know a password has to have at least 3 symbols, but I don't know where those symbols are. What is the simplest way to specify this when cracking the password with hashcat? The only ...
user avatar
  • 875
0 votes
1 answer
79 views

Cracking hashes of trivially modified passwords

If I started with “password”, then change it to “password2”, “password3” etc, is that easier to crack the hashes of the set of passwords than if I used only the original password? Does having the ...
user avatar
  • 1,823
0 votes
1 answer
430 views

pwdump8-8.2 correct hash for Microsoft Account Win10

I am having a real issue cracking one NT hash i've pulled from my system for a Microsoft Account. I used - PwDump8.2 I have an admin account unlocked on the system and can access most files. I know ...
user avatar
  • 5
0 votes
1 answer
151 views

Creating Wordlist from specific characters and numbers using Mentalist or similar program

I have locked myself out of my Win 10 Microsoft account by forgetting my password and need to get back into it. I have extracted the hash for the account. I've been researching wordlists and hash ...
user avatar
  • 5
0 votes
1 answer
137 views

crackmapexec continue after finding first match

I am currently trying to solve the RazorBlack room on tryhackme. After enumerating the machine, I created a list of valid usernames and was also able to crack the password of one of the users. Now I ...
user avatar
0 votes
0 answers
106 views

Windows 10 user autologin password lost

A while ago I have set up the autologin for my Windows 10 user. I do not know the password anymore. I can login to the system (as has autologin now). But I cannot change the password. Is it possible ...
user avatar
1 vote
1 answer
382 views

THC Hydra sends GET request without parameter before actual request with parameter which causes authentication problems

I am using THC Hydra (v9.0) on GNU/Linux to pentest my private API. The GET route in question requires a key as GET parameter which returns an auth token if the correct key was submitted else "...
user avatar
  • 11
0 votes
1 answer
2k views

John the ripper not able to crack the password

I generated two hashes from this site: Plaintext 1 (p1): world Salt 1 (s1): hello Hash 1 (h1): 936a185caaa266bb9cbe981e9e05cb78cd732b0b3280eb944412bb6f8f8f07af Plaintext 2 (p2): world2 Salt 2 (s2)...
user avatar
2 votes
3 answers
405 views

To lighten server load, is hashing a client-side Argon2-hashed password with SHA-256 on the server-side at least as safe as server-side only Argon2?

I am trying to achieve better security in my authentication system implementation with both server-side hashing and client-side hashing. (See the first reference below for more prerequisite knowledge.)...
user avatar
  • 131
1 vote
3 answers
187 views

Does hashing syslog (or similar) make for good passwords?

I thought of an approach to password generation that I haven't heard of anyone else using. It almost seems too good to be true so I wonder what the downsides are. I'm well aware that you shouldn't &...
user avatar
  • 11
0 votes
0 answers
466 views

Speed up cracking a wpa2.hccapx file in hashcat

I'm trying to do a brute force with Hashcat on windows with a GPU cracking a wpa2.hccapx handshake. Based on my research I know the password is 10 characters, a mix of random lowercase + numbers only ...
user avatar
  • 1
1 vote
1 answer
139 views

Backup + AES-128 encrypted file in Cloud sync

I've some data that I want to backup to the cloud. I also have a file containing personal data, that I need to sync across multiple devices. At the moment, for this file, locally in my computer, I've ...
user avatar
  • 13
1 vote
1 answer
1k views

Cracking Lost Password for encrypted 7z file with most characters known

I forgot password to 7z archive encrypted with AES 256. I am fairly certain of most characters however. I know password length is either 8 or 12 characters and if it is 12 I know the last 4 characters....
user avatar
0 votes
1 answer
91 views

If a platform/system has brute force protection should I care for a very strong password

If a platform has brute force protection should I worry about creating a very strong password since any attacker would not get a chance to reach enough attempts to crack even the weakest password? Not ...
user avatar
  • 103
3 votes
2 answers
3k views

Does john the ripper not support yescrypt?

I'm learning about password attacks using john and am trying to use it for bruteforcing my shaddow file. I created a user called newuser with password stuff and then used sudo unshadow /etc/passwd /...
user avatar
-1 votes
1 answer
154 views

What are the security implications of the password policy for this bank? [duplicate]

I am aware of a bank (redacted for obvious reasons) that has the following password policy. Only English alphanumeric characters Min of 8, max of 14 characters No special characters (ex. !@#$%^&* ...
user avatar
0 votes
1 answer
465 views

I have been hacked on Facebook multiple times today alone. What do I do?

My Facebook account has had its password changed four times today, and I'm wondering what to do. The first time, was at 5:02pm. I received an email saying that my password had been changed. I recently ...
user avatar
1 vote
1 answer
219 views

What's the point of connecting to another machine with SSH to crack a password?

If anyone has heard of Ippsec and watched his videos, you'll see that when he extracts a password hash from a machine, he doesn't crack it in his own computer, rather, he uses SSH to connect to his ...
user avatar
1 vote
1 answer
5k views

John the Ripper is unable to crack my SHA1 hashed password

John the Ripper is unable to crack my SHA1 hashed password: john --wordlist=rockyou.txt testing.txt Whenever I do this in Kali Linux, I get this response: Loaded 1 password hash (Raw-SHA1 [SHA1 256/...
user avatar
0 votes
2 answers
1k views

Does John the Ripper automatically account for salt and hash?

I have an embedded device running Armbian which I was able to get the drive image from. The entry in /etc/shadow combined with /etc/passwd after unshadowing is this: root:$6$TV6ML2bG$TncnN/adtU9xaQs/...
user avatar
0 votes
2 answers
410 views

How does having a password hash speed up cracking vs not having a hash (on-site)?

On Windows, user password hashes are not salted and, on Linux, user password hashes are stored in the same root-owned file as the salt. Given this, in what ways might a bruteforce attack to find the ...
user avatar
  • 321
1 vote
1 answer
236 views

Opening password file with John The Ripper

I have an old Windows domain SMB sniffer file circa 1998 and just out of interest I want to see if I can crack it now with John The Ripper. I believe the file was generated using the L0phtCrack SMB ...
user avatar
1 vote
1 answer
139 views

PAKE - What to do when a weakness is found?

In the case of a password hashing function like Argon2, I know that when a weakness is found, you use another password hashing function, wrap it around the existing hashes and calculate the hash of ...
user avatar
  • 697
17 votes
1 answer
7k views

John the ripper password cracked or not?

I have the shadow file from an embedded device running linux. Trying to use John to crack it. There is only the 'root' hash in the shadow file. 12 seconds in, John finds the password for 'root', but ...
user avatar
0 votes
0 answers
114 views

How much entropy is needed for encrypting data locally?

I understand that, when storing data on the cloud or something else that might get leaked to the public, the security margin should be at least 128 bit, 256 bit should be used for data that should ...
user avatar
  • 697
22 votes
4 answers
8k views

Does password length / complexity make any difference if hashes are leaked?

Password length/complexity only mitigates a brute force attack, correct? In the event of a hash leak, since any algorithm is a fixed length, there could potentially be a pre-image* with a very short / ...
user avatar
  • 323
1 vote
0 answers
232 views

Using John the Ripper for Blockchain.info second password

Is there a way to use JtR for Blockchain.info's (v2) secondary password? I already tried the blockchain2john.py file, and it does not ask for primary password (which I know already) so it is going to ...
user avatar
  • 61
0 votes
2 answers
364 views

Is it possible to reverse a hashed password? [duplicate]

Is it possible to reverse a password hashed with bcrypt?
user avatar
  • 17

1
2 3 4 5
15