Questions tagged [password-cracking]
for questions relating to the cracking of passwords and the practices to mitigate against passwords being cracked.
3
votes
2answers
85 views
How to choose between password derivation or encryption?
Suppose you use a password manager having all possible features of modern password managers: encryption with a key derived from your master password, auto-filling, cloud or local storage, browser ...
0
votes
0answers
45 views
John the Ripper quits before cracking hash
I have a single raw-md5 hash that I want to crack. I've put it in a proper text file without a trailing linespace. I also want to use a wordlist for this. However, john exits before actually trying to ...
1
vote
1answer
223 views
Can a password cracker reverse engineer my generation method?
Lets say I generated a password with really awful entropy seed (5 bits~), but then used another selection process (with a low entropy seed as well) to select at random a method to generate a password (...
0
votes
3answers
107 views
Would it be more secure to enforce “at least one upper case” or to enforce “at least one letter (any case)”
I am devising a set of password requirements. I am requiring users to use the following:
Minimum 8 characters
Minimum 1 number
Minimum 1 special character
Minimum 1 letter (any case)
I would like ...
1
vote
0answers
35 views
Increase password iterations?
Is it possible to strengthen the macOS login password by increasing the number of sha-512 iterations?
1
vote
1answer
51 views
How do Field Programmable Gate Arrays (FPGAs) compare to Graphics Processing Units (GPUs); for cracking hashes?
As a general rule, GPUs are more effective than CPUs when it comes to performing acutely repetitive tasks, like iterating over lists and generating permutations of a set (i.e. exhausting dictionaries &...
1
vote
0answers
59 views
How to create a keygen [closed]
I have a list with approx 500 serial numbers (each one with 10 digits) and all the 500 passcodes generated for those serials (also with 10 digits, but alphanumeric).
Is possible to discover the ...
1
vote
1answer
39 views
Hashcat: How to discard words of length less than N after rules have been applied?
Hashcat: How to discard words of length less than N after rules have been applied?
I know of the rules <N and >N that discards the word if its length is less than and greater than N, ...
0
votes
1answer
52 views
Both Ophcrack and ONTP&RE incorrectly show Windows 10 passwords as blank
I'm trying to crack a Windows 10 laptop that I myself set a password on a day or so ago. So far I've tried booting into Ophcrack 3.6 and ONTP&RE (Offline NT Password & Registry Editor) from ...
1
vote
1answer
74 views
Do hacks of mainstream web applications tend to happen more from random attackers brute forcing or from targeted heuristic attacks?
I'm writing up advice for selecting a master password for a password manager, and I'm wondering if there is available data about the likelihood of different attacks that result in a cracked password. ...
0
votes
1answer
132 views
Brute-Forcing DVWA login page with hydra
I'm learning how to brute force web login pages with a popular brute force tool called "Hydra". I'm using Kali Linux (VirtualBox) to do this. I've installed DVWA (Damn Vulnerable Web Application) and ...
1
vote
1answer
99 views
If someone has a hashed password, how long till they decrypt it?
Earlier my friend suggested that we have a race to see who could decrypt a hashed password first. I want to do it but I don't want it to be an all month thing. I know when passwords are hashed they ...
1
vote
0answers
38 views
How to brute force ARJ passwords? [closed]
I came across some password protected ARJ files. Can anyone name a password cracker for those archives? Ideally running on linux or OSX.
0
votes
0answers
39 views
rainbow-table which Reduction function is best or use both
Two Reduction function in rainbow-table known to me
one = i H(P1) = X1, remove X1 remove all the value only left first few number
Two - x mod N, mod method
or Use both but if using both which which ...
-2
votes
2answers
219 views
What are most dangerous vulnerabilities of users of password management? [closed]
Are there any examples where something goes wrong. For example, say people misused password managers and got hacked or take some loss? If so how?
Basically, I sort of know the typical vulnerabilities ...
1
vote
1answer
134 views
Are partial passwords a security improvement over full passwords?
With full password authentication, you need to enter the full password every time.
With partial password authentication, you're asked for some subset of the password each time, and which characters ...
27
votes
4answers
10k views
Cracking double encrypted router password?
I noticed in the html of my router this parameter:
form.addParameter('Password', base64encode(SHA256(Password.value)));
So when I type in the password passw I get this via sslstrip:
2018-09-25 21:...
1
vote
2answers
197 views
John the Riper couldn't crack all the passwoords
I have a password file with 7 passwords, but JTR only could crack 4 and 3 that couldn't.
What it's the reason?
C:\tmp\john179j5\run>john --show shadow.txt
root:password:12923:0:99999:7:::
student1:...
2
votes
1answer
64 views
Is there any defense against this kind of attacks? (key comparison attack, or something)
is there any defense against this kind of attack?
https://youtu.be/7U-RbOKanYs?t=974
I know someone who uses a password encryption hashing that generates the same length of keys as in this video and ...
1
vote
3answers
179 views
Hashcat doesn’t write to output file [closed]
I am using hashcat to crack a list of md5 hashes and have used the following command
hashcat -m 0 -a 0 -o out.txt --force hashdump.txt ../rockyou.txt
which gives the output
Session..........: ...
0
votes
3answers
127 views
Assuming my password is strong enough, how else can I protect my account? [closed]
I'm a very insecure person, so I made my gmail account's password so long, that I started to question whether or not it's possible for someone to hack it with any given method (It's a passphrase with ...
1
vote
1answer
72 views
Best practices to protect public/private SSH key pair in web interface?
I've got a dilemma here: I'm working on a system that will connect to remote linux servers for monitoring and automating some processes. Since user+pass is insecure for obvious reasons and public/...
1
vote
0answers
52 views
crunch password generation with multiple character sets
I'm trying to use crunch to generate a password list. However, if I add all necessary characters into one character set, as in:
file: charset_huge.lst
complex = [...
1
vote
1answer
122 views
How to increase the time for an offline password attack
I am trying to answer a CASP exam practice question.
Could someone comment on the options below regarding the logic behind each item? Where is the logical error behind each statement?
A Storage-...
0
votes
2answers
435 views
Is it possible to crack Joomla hash password?
I'm a developer and suddenly I fall in a stupid situation like I need to crack a hash Joomla password which is (5aa154999c111bf7f33a1a3cadba5847) and I don't know the salt. is there any way to crack ...
0
votes
2answers
76 views
Generating multi-word passphrases from a wordlist
As part of pentesting NT hashes where the underlying passwords are minimum 16 characters of length, I have created a wordlist of common words, sports teams, movies, names, years etc. - inspired by the ...
39
votes
14answers
11k views
How can I make a strong password that's easy to remember? Is the 4 Word method safe? [duplicate]
I have heard of the method of using 4 random dictionary words, it gives you lots of characters and is easy to remember.
But that seems to be open to dictionary attacks, especially if the attacker has ...
1
vote
1answer
81 views
hashcat specific brute force
Is this scenario possible:
I know the first three letters of the password (exact), i know the password is between 10-14 characters, i know the rest of the characters are "b,t,p,1,3,6,7" which can be ...
0
votes
2answers
875 views
Most efficient way to crack a NTLM hash
I've been given a non-salted NTLM hash and a week worth of time to find the password it hides. I have also been told the password length is 11 chars, and that it is a Windows 10 user password.
I'm ...
1
vote
1answer
506 views
Best tool to BruteForcing RDP
I have tried many tools and to do not seem to be successful with locking out an account I am testing on my network with an RDP domain. I used crowbar, ncrack and THC hydra but they don't seem to be ...
-1
votes
1answer
78 views
Where can i find a pre-computed 8 caracter uppercase password file/dictionary
To create an all permutations dictionary of an 8 character uppercase only password, I get I can use crunch to make this wordlist and file would roughly be 1.8 - 2Tb in size.
Is there anywhere I can ...
0
votes
1answer
377 views
THC Hydra on Windows RDP Domain
I am testing a bruteforce on a windows rdp server within a domain. It seems to not be working because nothing is locking out the account I am targeting. How do you specify a domain username? I tried ...
2
votes
1answer
305 views
Crack Putty Private Key (PPK)
I found a private key which seems to be in the putty private key format.
The key has the following header:
---- BEGIN SSH2 ENCRYPTED PRIVATE KEY ----
Subject: <sensitive>
Comment: <...
8
votes
1answer
832 views
Mitigating the new attack on WPA2 involving PMKID
A new attack was discovered which allows cracking a WPA2 passphrase without needing to capture the 4-way handshake. While this doesn't weaken the password itself, it does mean that an attacker can ...
1
vote
2answers
228 views
Finding and attacking an IMAP Server
For a security challenge I am supposed to dictionary attack an IMAP service. A rather simple exercise using hydra.
So far I failed, since I've given hydra the actual website instead of the mail ...
2
votes
1answer
90 views
How to interpret the attempt information from Hydra
I was performing a Hydra attack on my TP-Link router and for that I prepared a passwords.txt file with 288 passwords.
hydra -l webadmin -P test_creds/passwords.txt xxx.xxx.xxx.xxx ftp
A minute ...
1
vote
1answer
65 views
Hydra not matching password provided in file
I was pen-testing my TP-Link router yesterday and tried performing a Hydra attack on it. I wrote the following line on the terminal:
hydra -l admin -p passwords.txt 192.168.0.1 http
The username and ...
0
votes
1answer
58 views
Crack Hashed Byte Array? [closed]
I know it would take forever to crack a simple hashed byte array, though for learning sake I was wondering whether it is possible to crack a hashed byte array?
And if so, any suggestions how to do ...
1
vote
1answer
280 views
What is EAPOL payload in WPA2 Cracking?
I am currently working on a python script to crack WPA2. From this SO question:
How exactly does 4-way handshake cracking work?
I've all of the necessary fields as described, i.e. Addresses, NONCES,...
3
votes
5answers
263 views
What is the most secure way to store the password on a physical medium (paper, etc)? [duplicate]
Let's assume that I have to store the password on a material medium (paper, etc). What is the most secure way to do that? I mean a way of storing the password that does not needs any electronic tools ...
1
vote
3answers
850 views
Is it possible to crack any SHA1 hashed password
I'm trying to understand how easy it is to crack a SHA1 hashed password. I have a training database giving hundreds of password hashed.
I have tried to use some online tools to crack them and I have ...
0
votes
0answers
26 views
After converting a .zip file to an .exe, can we get the password using a hex editor? [duplicate]
I have a zip file and was wondering if the password can be extracted. Like if I convert it to a exe file and use a hex editor to extract the password. How practical is this method? and also what is ...
1
vote
1answer
156 views
How can i fine tune hydra to find the correct password
I am having a bit of a pickle getting hydra to see the correct password when the page is redirected. The condition where the password is correct is if the login is redirected to a certain page in the ...
-1
votes
3answers
287 views
How to estimate the time for a hacker to crack a strong password
Some kind-heart hacker just sql-injected our website, getting the hash of admin password of 10 lower case chars. It took him half a day to crack it without knowing the SALT (he know that we use "...
9
votes
3answers
527 views
How could our passwords be cracked so easily?
We are saving password in a database using PHP:
return hash('sha256', PASSWORD_SALT . $password);
Recently a (fortunately) good hacker SQL-injected us and cracked some passwords including the admin ...
0
votes
0answers
52 views
AES Encryption Crack [duplicate]
i have some texts encrypted with AES/CBC/PKCS5PADDING algorithm and i've almost lost its encryption passwords, I want to know that this algo is CRACKABLE or not?
and if CRACKABLE how can I crack it?
3
votes
3answers
135 views
Can one find the value of a “constant salt” if they can set the password and get the hash?
Saying we have an oracle that an attacker can use as many time as they want. The attacker can send a non-empty password to this Oracle. The Oracle hashes the password using sha256(password + pepper), ...
1
vote
0answers
135 views
Cracking Salted Peoplesoft Hashes
So I felt the saga of my last post was getting too long (linked here: Unknown round length makes hash uncrackable?) so I would create a new one addressing the current problem as it stands. My new ...
1
vote
0answers
83 views
Unable to display login username in Hydra
So I'm performing an authentication cracking lab using Hydra, I use the following command;
hydra -L /usr/share/ncrack/minimal.usr -P /usr/share/wordlists/s1.txt -f -V 192.168.99.22 telnet
The ...
3
votes
2answers
192 views
Is there a cryptographic disadvantage to applying bcrypt to an already hashed password
I originally asked this on stackoverflow, but due to lack of traction and a recommendation by a user there I have asked it here too.
Imagine a scenario where a client application is sending a ...
