Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

for questions relating to the cracking of passwords and the practices to mitigate against passwords being cracked.

0
votes
3answers
55 views

Hashcat doesn’t write to output file

I am using hashcat to crack a list of md5 hashes and have used the following command hashcat -m 0 -a 0 -o out.txt --force hashdump.txt ../rockyou.txt which gives the output Session..........: ...
0
votes
3answers
117 views

Assuming my password is strong enough, how else can I protect my account? [on hold]

I'm a very insecure person, so I made my gmail account's password so long, that I started to question whether or not it's possible for someone to hack it with any given method (It's a passphrase with ...
1
vote
1answer
55 views

Best practices to protect public/private SSH key pair in web interface?

I've got a dilemma here: I'm working on a system that will connect to remote linux servers for monitoring and automating some processes. Since user+pass is insecure for obvious reasons and public/...
1
vote
0answers
35 views

crunch password generation with multiple character sets

I'm trying to use crunch to generate a password list. However, if I add all necessary characters into one character set, as in: file: charset_huge.lst complex = [...
1
vote
1answer
115 views

How to increase the time for an offline password attack

I am trying to answer a CASP exam practice question. Could someone comment on the options below regarding the logic behind each item? Where is the logical error behind each statement? A Storage-...
-4
votes
0answers
47 views

I have a SAM file on KALI linux. How can I extract the hashes from SAM and crack them? [on hold]

I have a SAM file on KALI linux. How can I extract the hashes from SAM and crack them? How can I load the hashes from SAM database and crack
0
votes
2answers
140 views

Is it possible to crack Joomla hash password?

I'm a developer and suddenly I fall in a stupid situation like I need to crack a hash Joomla password which is (5aa154999c111bf7f33a1a3cadba5847) and I don't know the salt. is there any way to crack ...
0
votes
2answers
45 views

Generating multi-word passphrases from a wordlist

As part of pentesting NT hashes where the underlying passwords are minimum 16 characters of length, I have created a wordlist of common words, sports teams, movies, names, years etc. - inspired by the ...
39
votes
14answers
11k views

How can I make a strong password that's easy to remember? Is the 4 Word method safe? [duplicate]

I have heard of the method of using 4 random dictionary words, it gives you lots of characters and is easy to remember. But that seems to be open to dictionary attacks, especially if the attacker has ...
1
vote
1answer
43 views

hashcat specific brute force

Is this scenario possible: I know the first three letters of the password (exact), i know the password is between 10-14 characters, i know the rest of the characters are "b,t,p,1,3,6,7" which can be ...
0
votes
2answers
82 views

Most efficient way to crack a NTLM hash

I've been given a non-salted NTLM hash and a week worth of time to find the password it hides. I have also been told the password length is 11 chars, and that it is a Windows 10 user password. I'm ...
1
vote
1answer
117 views

Best tool to BruteForcing RDP

I have tried many tools and to do not seem to be successful with locking out an account I am testing on my network with an RDP domain. I used crowbar, ncrack and THC hydra but they don't seem to be ...
-1
votes
1answer
71 views

Where can i find a pre-computed 8 caracter uppercase password file/dictionary

To create an all permutations dictionary of an 8 character uppercase only password, I get I can use crunch to make this wordlist and file would roughly be 1.8 - 2Tb in size. Is there anywhere I can ...
0
votes
1answer
109 views

THC Hydra on Windows RDP Domain

I am testing a bruteforce on a windows rdp server within a domain. It seems to not be working because nothing is locking out the account I am targeting. How do you specify a domain username? I tried ...
1
vote
1answer
152 views

Crack Putty Private Key (PPK)

I found a private key which seems to be in the putty private key format. The key has the following header: ---- BEGIN SSH2 ENCRYPTED PRIVATE KEY ---- Subject: <sensitive> Comment: <...
8
votes
1answer
682 views

Mitigating the new attack on WPA2 involving PMKID

A new attack was discovered which allows cracking a WPA2 passphrase without needing to capture the 4-way handshake. While this doesn't weaken the password itself, it does mean that an attacker can ...
1
vote
2answers
122 views

Finding and attacking an IMAP Server

For a security challenge I am supposed to dictionary attack an IMAP service. A rather simple exercise using hydra. So far I failed, since I've given hydra the actual website instead of the mail ...
2
votes
1answer
73 views

How to interpret the attempt information from Hydra

I was performing a Hydra attack on my TP-Link router and for that I prepared a passwords.txt file with 288 passwords. hydra -l webadmin -P test_creds/passwords.txt xxx.xxx.xxx.xxx ftp A minute ...
1
vote
1answer
48 views

Hydra not matching password provided in file

I was pen-testing my TP-Link router yesterday and tried performing a Hydra attack on it. I wrote the following line on the terminal: hydra -l admin -p passwords.txt 192.168.0.1 http The username and ...
0
votes
1answer
52 views

Crack Hashed Byte Array? [closed]

I know it would take forever to crack a simple hashed byte array, though for learning sake I was wondering whether it is possible to crack a hashed byte array? And if so, any suggestions how to do ...
1
vote
1answer
143 views

What is EAPOL payload in WPA2 Cracking?

I am currently working on a python script to crack WPA2. From this SO question: How exactly does 4-way handshake cracking work? I've all of the necessary fields as described, i.e. Addresses, NONCES,...
3
votes
5answers
207 views

What is the most secure way to store the password on a physical medium (paper, etc)? [duplicate]

Let's assume that I have to store the password on a material medium (paper, etc). What is the most secure way to do that? I mean a way of storing the password that does not needs any electronic tools ...
1
vote
3answers
241 views

Is it possible to crack any SHA1 hashed password

I'm trying to understand how easy it is to crack a SHA1 hashed password. I have a training database giving hundreds of password hashed. I have tried to use some online tools to crack them and I have ...
0
votes
0answers
26 views

After converting a .zip file to an .exe, can we get the password using a hex editor? [duplicate]

I have a zip file and was wondering if the password can be extracted. Like if I convert it to a exe file and use a hex editor to extract the password. How practical is this method? and also what is ...
1
vote
1answer
95 views

How can i fine tune hydra to find the correct password

I am having a bit of a pickle getting hydra to see the correct password when the page is redirected. The condition where the password is correct is if the login is redirected to a certain page in the ...
0
votes
0answers
28 views

Hydra only prodcues false positive results [duplicate]

UPDATE I did get Hydra running thought it's just reporting false positives. I am trying to brute force a CTF box, the login page is at the root URL of the box and has only password field. I am using ...
-1
votes
3answers
198 views

How to estimate the time for a hacker to crack a strong password

Some kind-heart hacker just sql-injected our website, getting the hash of admin password of 10 lower case chars. It took him half a day to crack it without knowing the SALT (he know that we use "...
9
votes
3answers
512 views

How could our passwords be cracked so easily?

We are saving password in a database using PHP: return hash('sha256', PASSWORD_SALT . $password); Recently a (fortunately) good hacker SQL-injected us and cracked some passwords including the admin ...
0
votes
0answers
52 views

AES Encryption Crack [duplicate]

i have some texts encrypted with AES/CBC/PKCS5PADDING algorithm and i've almost lost its encryption passwords, I want to know that this algo is CRACKABLE or not? and if CRACKABLE how can I crack it?
3
votes
3answers
123 views

Can one find the value of a “constant salt” if they can set the password and get the hash?

Saying we have an oracle that an attacker can use as many time as they want. The attacker can send a non-empty password to this Oracle. The Oracle hashes the password using sha256(password + pepper), ...
1
vote
0answers
110 views

Cracking Salted Peoplesoft Hashes

So I felt the saga of my last post was getting too long (linked here: Unknown round length makes hash uncrackable?) so I would create a new one addressing the current problem as it stands. My new ...
1
vote
0answers
50 views

Unable to display login username in Hydra

So I'm performing an authentication cracking lab using Hydra, I use the following command; hydra -L /usr/share/ncrack/minimal.usr -P /usr/share/wordlists/s1.txt -f -V 192.168.99.22 telnet The ...
3
votes
2answers
187 views

Is there a cryptographic disadvantage to applying bcrypt to an already hashed password

I originally asked this on stackoverflow, but due to lack of traction and a recommendation by a user there I have asked it here too. Imagine a scenario where a client application is sending a ...
1
vote
0answers
22 views

John the Ripper modify passwords before checking

Assume I have a password I want to crack in the following format: 100 times the character 'a' prepended to Some word found in a wordlist John will probably not be able to crack this with the default ...
1
vote
1answer
162 views

Unknown round length makes hash uncrackable?

So I am on an engagement and grabbed some hashes but cracking them has come to no avail. I believe I know the hash type (PBKDF2-HMAC-SHA256) but I am not sure what round size they used. This got me ...
3
votes
1answer
168 views

Time to crack passphrase of 4 English word combinations at 7 terahashes/sec

This site suggests using 4 common English words as a password is no longer safe. Apparently the top 5000 English words in any combination of 4 words can be hashed in 1.5 minutes at 7Thash/sec. The ...
2
votes
0answers
106 views

Breaking my own encryption scheme from the eighties [closed]

In the 80's, I wrote an encryption program for some small data files (10-20 K). It's purely EOR-based so both encryption and decryption is identical and can toggle back and forth infinitely. The user ...
0
votes
1answer
572 views

Simple Hydra test with Windows RDP

I am using VMware and have 3 VMs all on the NAT network with DHCP. All three machines can ping each other. From one windows to the other windows, I can RDP into the 192.168.190.130 windows machine ...
26
votes
12answers
16k views

Reusing passwords that can possibly never be cracked

Reusing passwords pose as a terrible risk for users because in the event of a data breach, with the passwords not being stored securely enough, this means that, by default, all other services that ...
1
vote
1answer
269 views

Using Windows LSA Hashes obtained from crackmapexec

I have obtained some hashes using crackmapexec and dumping from the LSA process. The hashes are in this form (data below is fake): adm_name:c6f132a235209036744ba5d303bd5d9b:SOME.ORGANISATION.COM:...
2
votes
1answer
218 views

Tools and computer specs for password cracking [closed]

To polish my penetration testing skills I want to attempt to crack NTLM/NTLMv2 hashes (via dictionary/wordlist attack) extracted from Active Directory / SAM database, where the underlying passwords ...
3
votes
2answers
299 views

Change the function such that there are no more side-channels

Given is the function compareKey which is a part of a crackme (a binary file). Which side-channel attack can be used to find the right password (password is made up by ASCII coded big and small ...
2
votes
2answers
161 views

Does having a salted password hash make cracking an unsalted hash of the same password easier?

I've been asked to implement a system to prevent reusing passwords on the same account. The most secure way I know to do this is to compare hashes of the password + a known salt. bcrypt.hash(sha256(...
1
vote
1answer
316 views

How is it that tools like Hashcat, JTR able to bruteforce an NTLMv2 hashes?

With regards to the following question about the feasibility of (brute|dictionary|rainbowtable)-forcing an NTLMv2 hash: How feasible is it for an attacker to brute-force an NTLMv2 response captured ...
31
votes
9answers
7k views

What considerations do I need to keep in mind when enforcing passphrases?

According to XKCD: Password Strength, if the password consists of “four random common words”, it will be secure and memorable. I want to make a web application and make users create their passwords ...
0
votes
1answer
128 views

How can we estimate the time and computing resources needed to break or crack an encryption algorithm and/or password?

I am not too familiar with the technical jargon, so bear with me while I explain the issue in simple and naive words. I have looked into many places but still haven't found a solution to this specific ...
3
votes
2answers
488 views

WPA password cracking setup

let's say i am trying to crack a WPA password and i need to create a virtual machine setup for it. What would the setup be if i limit myself with a specific number of hours ( let's say 24 hours and ...
3
votes
1answer
201 views

What are the factors making a WPA2 handshake suitable for cracking?

Days ago I was dumping handshakes of my APs using airodump-ng. I would later use aircrack-ng to crack them using wordlists which would purposely contain the passphrases. However, I noticed that some ...
5
votes
2answers
4k views

How long would it take to brute force an 11 character single-case alphanumeric password?

My previous home wifi router's WPA2 password was permanently fixed to FZ4HBCKHGC8. How long would it take to crack via brute force? Or more pragmatically: How long would it take to exhaust all ...
0
votes
1answer
127 views

What is the weakest scheme in common use for password hashing?

Essentially, what's the next step up from plaintext password storage? I suspect the answer is going to be MD5, but I'm not familiar with a broad enough variety of examples to be sure. The reason ...