The password-cracking tag has no wiki summary.
1
vote
2answers
45 views
Hashing password with salt [duplicate]
I read from wiki:
The attacker has access to both the hashed password and the salt, so when running the dictionary attack, the attacker can simply use the known salt when attempting to crack the ...
0
votes
1answer
81 views
WPA cracking with Crunch, JTR & Aircrack
Now I assume that everyone knows of aircrack-ng and John The Ripper with it's fantastic ability to pause and resume cracking.
With that aside, I want to add Crunch into the mix, however I can't seem ...
-1
votes
1answer
71 views
Is it really worth to spend time on Telegram Crypto Contest? [closed]
Telegram is running this crypto contents. But what I heard from some people on the web is that they designed the contest in such a way that they made it practically impossible to crack.
Is it really ...
2
votes
1answer
81 views
Hashcat, finding out the Hash
I've been searching but I can't seem to find the much information on how to extract hash's from say PDF files or Lotus Notes files that I can then use in Hashcat? I know how to get them for Office ...
0
votes
0answers
23 views
How rainbow table works? [duplicate]
I have roughly understand how a rainbow table works from http://en.wikipedia.org/wiki/Rainbow_table, but
I am quite curious why there is a need of different reduction functions for each column for ...
-1
votes
2answers
68 views
WPA and WPA2 Help [closed]
I'm trying to hack my own WPA and WPA2 network for learning purposes.
I used A 10 characters length password with only numbers, I know if I had to create the word list file it will be Huge, So I ...
3
votes
2answers
110 views
John the Ripper not identifying a password contained in the username?
I have uploaded a screenshot of what exactly is going on, here: http://i.imgur.com/bJSv7C8.png
I can see that single-crack mode includes a rule that looks at the username, and "slices" it to identify ...
1
vote
0answers
36 views
Cracking MD5($p.$s) [duplicate]
I have a salt and a password for an application that is using MD5($password + $salt) and I'm looking to crack it. I believe this to be the same format that joomla uses. I'm having trouble figuring out ...
0
votes
1answer
147 views
John the Ripper password cracker is viable?
Is this still viable? I remember using this when it just worked in shells.
http://www.openwall.com/john/
1
vote
4answers
229 views
Is there any defense against Brute-Force done on a local encrypted file?
Let me start off by saying I don't know very much about encryption, hashing, cracking, etc. I'm just a typical computer enthusiasts, programmer and researcher with many questions.
So, I've discovered ...
3
votes
2answers
243 views
Is it unsafe to have hashes of parts of a private string
We have string B and the hashes hash(P+B), hash(P); is it possible for P to be revealed easier using this information than having hash(P) ? What is the difference ?
Any links to articles or any ...
-2
votes
3answers
186 views
My friend hashes passwords with SHA512 algorithm without salt. How do I convince him that he needs to add salt?
Today I discovered something incredibly stupid - my friend hashes user passwords with sha512 algorithm without a salt. I immediately raised this issue to him but he said he wants to see anyone crack a ...
1
vote
1answer
727 views
John the Ripper - Calculating brute force time to crack password
I'm using incremental mode (brute force) mode in John the Ripper to crack Linux MD5 passwords. I'm trying to calculate the time it will take to run through all combinations of 12 passwords (with 12 ...
4
votes
2answers
231 views
XKCD-like passphrases to stdout
I'm trying to find a way to crack XKCD-like passphrases (correcthorsebatterystaple) from word dictionaries. Basically concatenate X number of words from a dictionary file. Right now it honestly ...
1
vote
2answers
803 views
Brute force alphanumeric password using JohnTheRipper
I recently recovered a zip archive with some files I need access to, but I can't remember the password. All I can remember is that the password was short (around 3-4 characters), and contained only ...
-1
votes
1answer
232 views
Cracking a 6-character alphanumeric password Windows dialog box
To put this problem in context, I have a touch monitor screen whose firmware program is protected by a password.
The firmware program is downloaded over RS232 via a Windows utility program provided ...
1
vote
2answers
103 views
Password Cracking Mandarin Words English Character Set
I'll be looking to perform a domain password audit in which the user will be using english characters but may be 40% Mandarin speakers so I anticipate a large number of names, phrases, or words that ...
1
vote
2answers
121 views
Database compromised and some passwords cracked
I run an MMORPG game and today while moving from one server to another, apache failed and listed some of the data on the server including a back-up of all the source code + database which a few people ...
0
votes
1answer
832 views
Cracking Kingston DataTraveler vault privacy - is it possible?
I have Kingston DataTraveler vault privacy USB flash drive (DTVP/2GB). Here is tech specs. Flash drive has a 256-bit AES hardware based encryption.
My flash has password protected and I do not know ...
3
votes
1answer
464 views
find passphrase on encrypted ssh private key
I have an openssh encrypted private key. I don't remember the pass-phrase. I may be able to suggest words or patterns that may be in the phrase.
I am looking for software that will help me recover ...
2
votes
1answer
305 views
MySQL Authentication Hash Cracking
I'm currently conducting research regarding MySQL server remote authentication. I've captured unencrypted, uncompressed authentication packets between the client and the server where the username is ...
0
votes
1answer
114 views
Why providing many protected zip files will increase the chance of retrieving the password
In fcrackzip man they say :
the more files you provide, the better.
I want to know why. What's the method it uses to retrieve the password?
1
vote
1answer
1k views
John The Ripper 1.7.9 Jumbo Cracking SSH Key Help [closed]
According to John The Rippers wiki page, John's Jumbo edition supports many new non-hash cracking options like ssh keys, gpg, variety of browser password managers, and many more. From the site I ...
1
vote
0answers
59 views
Crack WPA2 with username [duplicate]
As far as I know you can crack WPA2-connections if you have the four-way-handshake. Then your program calculates the PMK/PTK and you get the key for the network. But what is with a WPA2-network where ...
1
vote
1answer
464 views
How do we estimate the time taken to crack a hash using brute force techniques
A German hacker famously managed to brute force crack a 160 bit SHA1 hash with passwords between 1 to 6 digits in 49 minutes.
Now keeping everything constant (hardware, cracking technique - here ...
0
votes
2answers
87 views
Precise measurement of password complexity
I am thinking on a system, which measures the complexity of a password not based on its entropy or compressibility, but with a simply sophisticated method.
The measurement of the ...
1
vote
1answer
2k views
Cracking Mysql 5 Hash using Hashcat
I am practicing cracking MYSQL5 hash using hash cat, however, for a reason or another, it finishes the cracking process too fast -within 30 seconds- without giving any results/errors back.
I doubted ...
2
votes
2answers
3k views
NTLM/LM Hashes on Domain Controller
I've noticed that when extracting password hashes from a domain controller (using Elcomsoft proactive password auditor) sometimes I'll get LM and NTLM hashes and other times I'll only get NTLM hashes.
...
1
vote
1answer
114 views
Cracking encrypted SQB databases
I've recovered a .SQB SQL database backup file from a backup server and do not have the password.
As I do not have the password available to me, I'm looking to determine what type of encryption is ...
1
vote
1answer
949 views
What to do with .hash files when cracking WPA2
So, I'd say I'm one level above n00b. I've gotten to the point where I have accomplished a WPA Handshake (and saved the output as xxx-01.cap). I have also downloaded these hash tables (if that is the ...
5
votes
1answer
603 views
Chinese or “pinyin” wordlists for dictionary attacks
Background:
I am currently trying to crack a salted md5 hash which I have recovered from an embedded device running busybox and manufactured in china.
I have tried john the ripper using all of the ...
-1
votes
2answers
4k views
Hydra https-form-post
I have never experimented much with online password crackers. I attempted to use Hydra today on this website www.athena2.harker.org and I keep getting false positives.
This is what I have done so ...
2
votes
1answer
2k views
How to crack SHA512 hexdigest passwords with John the Ripper?
I've been playing with John The Ripper (JtR) to try to crack/audit a salted password that was hashed with SHA-512, with 20 interactions according to the source (for the curious, this is a Rails app, ...
1
vote
0answers
86 views
Can ophcrack crack credential files?
I have obtained some credential files from another pc and would like to decrypt them. These are the ones found under local/roaming profile in Appdata folder
...
1
vote
1answer
95 views
Where to offer money for cracking check [duplicate]
I made a software and I would like to distribute it as a demo that can be registered. I would like to know if there is a site where I can offer some reward for some one try to crack my software and ...
1
vote
1answer
7k views
Forgot password to 7-Zip archive
I think I already know the answer to this question, but I thought I'd ask the experts anyway.
A few months back, I created a password-protected 7-Zip archive which housed the source code of a simple ...
1
vote
1answer
216 views
Problems with l0phtcrack
I recently wrote a website for my company and have been asked to Pen test it as well as the server. Have run SQL map and no vulnerabilities there, however I want to check if my hash and things are ...
2
votes
2answers
487 views
Pattern based password cracking
I need to select a project for this semester. I'm a second year uni student in Ethical Hacking and Countermeasures. My idea was to see if using some kind of pattern based password cracking can be more ...
0
votes
1answer
513 views
WPA/PSK Dictionaries
So i have been reading some articles on WPA/PSK encryption,
And one said that the hash is calculated like this:
Key = PBKDF2(passphrase, ssid, 4096, 256)
Where PBKDF2 is a standardized method ...
2
votes
2answers
820 views
What is the ultimate goal of hacking a webserver? [closed]
Recently I noticed a lot of traffic generated by automated bots that were checking for vulnerabilities in my web server. They were mainly looking for ways to hack into plesk/wordpress which I don't ...
1
vote
3answers
285 views
Cracking passwords after a pattern with John
So I am trying to find out how easy it is to crack a password using some great Linux tools.
We all know about John as a password cracker and how great it is. But how about specifying a pattern.
...
3
votes
3answers
409 views
Rainbow Tables: What is the Reduction Used for?
This is a follow up from this answer.
The answer is very good, and it put me to thinking and doing some research. I have found another good explanation on this site.
At some point, the author says:
...
2
votes
0answers
312 views
How do I convert from this weird John/Asleap format to lc (for HashCat)?
I'm trying to setup a system for pen-testing. I'm using the FreeRadius-WPE patch to collect Challenges/Requests from people who connect to my spoofed AP instead of the actual network. Here is the ...
-1
votes
3answers
316 views
help me about salting passwords
Eve has just discovered and decrypted the file that associates each userid
with its 32-bit random salt value, and she has also discovered and decrypted the password file, which contains the ...
1
vote
1answer
2k views
Brute force password cracking with a GPU
How are GPU's provisioned for password cracking? Do all, if not most cracking programs have special GPU aware software or do they just function at the basic driver or API level of the device?
Can it ...
1
vote
1answer
3k views
John the ripper passwd file format with salt not working
I'm trying test password strength in one of our e-commerce sites. I'm using john the ripper to brute-force a password file. The algorithm used by PHP is:
$hash = md5($salt . $pass)
No other ...
0
votes
1answer
422 views
How difficult is it to crack salt portion of hash
I write mobile application and I need to authenticate users against server. Server's side is written in php. I can't use cookies to store SID (Session ID), so I decided to send it at every request ...
1
vote
3answers
600 views
Password Security and ocl-Hashcat-plus
I recently read the Ars Technical Article about new features in ocl-Hashcat-plus. In light of questions like:
Long Passwords: How are they more secure?
and
XKCD #936: Short complex password, or ...
0
votes
2answers
446 views
Can AES-256 encrypted data be changed?
I have a file that supposedly contains AES-256 encrypted data. The file was created using a proprietary program that claims to use AES-256.
I have tested decrypting the file with an open source ...
-2
votes
1answer
160 views
Can Cain&Able Crack SSL? [closed]
I have been messing around with Cain and Able and used APR on another computer (also mine) to get a hashed version of my username and password for my yahoo e-mail account, but I seem to be lost as to ...
