for questions relating to the cracking of passwords and the practices to mitigate against passwords being cracked.
0
votes
3answers
55 views
Hashcat doesn’t write to output file
I am using hashcat to crack a list of md5 hashes and have used the following command
hashcat -m 0 -a 0 -o out.txt --force hashdump.txt ../rockyou.txt
which gives the output
Session..........: ...
0
votes
3answers
117 views
Assuming my password is strong enough, how else can I protect my account? [on hold]
I'm a very insecure person, so I made my gmail account's password so long, that I started to question whether or not it's possible for someone to hack it with any given method (It's a passphrase with ...
1
vote
1answer
55 views
Best practices to protect public/private SSH key pair in web interface?
I've got a dilemma here: I'm working on a system that will connect to remote linux servers for monitoring and automating some processes. Since user+pass is insecure for obvious reasons and public/...
1
vote
0answers
35 views
crunch password generation with multiple character sets
I'm trying to use crunch to generate a password list. However, if I add all necessary characters into one character set, as in:
file: charset_huge.lst
complex = [...
1
vote
1answer
115 views
How to increase the time for an offline password attack
I am trying to answer a CASP exam practice question.
Could someone comment on the options below regarding the logic behind each item? Where is the logical error behind each statement?
A Storage-...
-4
votes
0answers
47 views
I have a SAM file on KALI linux. How can I extract the hashes from SAM and crack them? [on hold]
I have a SAM file on KALI linux. How can I extract the hashes from SAM and crack them?
How can I load the hashes from SAM database and crack
0
votes
2answers
140 views
Is it possible to crack Joomla hash password?
I'm a developer and suddenly I fall in a stupid situation like I need to crack a hash Joomla password which is (5aa154999c111bf7f33a1a3cadba5847) and I don't know the salt. is there any way to crack ...
0
votes
2answers
45 views
Generating multi-word passphrases from a wordlist
As part of pentesting NT hashes where the underlying passwords are minimum 16 characters of length, I have created a wordlist of common words, sports teams, movies, names, years etc. - inspired by the ...
39
votes
14answers
11k views
How can I make a strong password that's easy to remember? Is the 4 Word method safe? [duplicate]
I have heard of the method of using 4 random dictionary words, it gives you lots of characters and is easy to remember.
But that seems to be open to dictionary attacks, especially if the attacker has ...
1
vote
1answer
43 views
hashcat specific brute force
Is this scenario possible:
I know the first three letters of the password (exact), i know the password is between 10-14 characters, i know the rest of the characters are "b,t,p,1,3,6,7" which can be ...
0
votes
2answers
82 views
Most efficient way to crack a NTLM hash
I've been given a non-salted NTLM hash and a week worth of time to find the password it hides. I have also been told the password length is 11 chars, and that it is a Windows 10 user password.
I'm ...
1
vote
1answer
117 views
Best tool to BruteForcing RDP
I have tried many tools and to do not seem to be successful with locking out an account I am testing on my network with an RDP domain. I used crowbar, ncrack and THC hydra but they don't seem to be ...
-1
votes
1answer
71 views
Where can i find a pre-computed 8 caracter uppercase password file/dictionary
To create an all permutations dictionary of an 8 character uppercase only password, I get I can use crunch to make this wordlist and file would roughly be 1.8 - 2Tb in size.
Is there anywhere I can ...
0
votes
1answer
109 views
THC Hydra on Windows RDP Domain
I am testing a bruteforce on a windows rdp server within a domain. It seems to not be working because nothing is locking out the account I am targeting. How do you specify a domain username? I tried ...
1
vote
1answer
152 views
Crack Putty Private Key (PPK)
I found a private key which seems to be in the putty private key format.
The key has the following header:
---- BEGIN SSH2 ENCRYPTED PRIVATE KEY ----
Subject: <sensitive>
Comment: <...
8
votes
1answer
682 views
Mitigating the new attack on WPA2 involving PMKID
A new attack was discovered which allows cracking a WPA2 passphrase without needing to capture the 4-way handshake. While this doesn't weaken the password itself, it does mean that an attacker can ...
1
vote
2answers
122 views
Finding and attacking an IMAP Server
For a security challenge I am supposed to dictionary attack an IMAP service. A rather simple exercise using hydra.
So far I failed, since I've given hydra the actual website instead of the mail ...
2
votes
1answer
73 views
How to interpret the attempt information from Hydra
I was performing a Hydra attack on my TP-Link router and for that I prepared a passwords.txt file with 288 passwords.
hydra -l webadmin -P test_creds/passwords.txt xxx.xxx.xxx.xxx ftp
A minute ...
1
vote
1answer
48 views
Hydra not matching password provided in file
I was pen-testing my TP-Link router yesterday and tried performing a Hydra attack on it. I wrote the following line on the terminal:
hydra -l admin -p passwords.txt 192.168.0.1 http
The username and ...
0
votes
1answer
52 views
Crack Hashed Byte Array? [closed]
I know it would take forever to crack a simple hashed byte array, though for learning sake I was wondering whether it is possible to crack a hashed byte array?
And if so, any suggestions how to do ...
1
vote
1answer
143 views
What is EAPOL payload in WPA2 Cracking?
I am currently working on a python script to crack WPA2. From this SO question:
How exactly does 4-way handshake cracking work?
I've all of the necessary fields as described, i.e. Addresses, NONCES,...
3
votes
5answers
207 views
What is the most secure way to store the password on a physical medium (paper, etc)? [duplicate]
Let's assume that I have to store the password on a material medium (paper, etc). What is the most secure way to do that? I mean a way of storing the password that does not needs any electronic tools ...
1
vote
3answers
241 views
Is it possible to crack any SHA1 hashed password
I'm trying to understand how easy it is to crack a SHA1 hashed password. I have a training database giving hundreds of password hashed.
I have tried to use some online tools to crack them and I have ...
0
votes
0answers
26 views
After converting a .zip file to an .exe, can we get the password using a hex editor? [duplicate]
I have a zip file and was wondering if the password can be extracted. Like if I convert it to a exe file and use a hex editor to extract the password. How practical is this method? and also what is ...
1
vote
1answer
95 views
How can i fine tune hydra to find the correct password
I am having a bit of a pickle getting hydra to see the correct password when the page is redirected. The condition where the password is correct is if the login is redirected to a certain page in the ...
0
votes
0answers
28 views
Hydra only prodcues false positive results [duplicate]
UPDATE I did get Hydra running thought it's just reporting false positives.
I am trying to brute force a CTF box, the login page is at the root URL of the box and has only password field. I am using ...
-1
votes
3answers
198 views
How to estimate the time for a hacker to crack a strong password
Some kind-heart hacker just sql-injected our website, getting the hash of admin password of 10 lower case chars. It took him half a day to crack it without knowing the SALT (he know that we use "...
9
votes
3answers
512 views
How could our passwords be cracked so easily?
We are saving password in a database using PHP:
return hash('sha256', PASSWORD_SALT . $password);
Recently a (fortunately) good hacker SQL-injected us and cracked some passwords including the admin ...
0
votes
0answers
52 views
AES Encryption Crack [duplicate]
i have some texts encrypted with AES/CBC/PKCS5PADDING algorithm and i've almost lost its encryption passwords, I want to know that this algo is CRACKABLE or not?
and if CRACKABLE how can I crack it?
3
votes
3answers
123 views
Can one find the value of a “constant salt” if they can set the password and get the hash?
Saying we have an oracle that an attacker can use as many time as they want. The attacker can send a non-empty password to this Oracle. The Oracle hashes the password using sha256(password + pepper), ...
1
vote
0answers
110 views
Cracking Salted Peoplesoft Hashes
So I felt the saga of my last post was getting too long (linked here: Unknown round length makes hash uncrackable?) so I would create a new one addressing the current problem as it stands. My new ...
1
vote
0answers
50 views
Unable to display login username in Hydra
So I'm performing an authentication cracking lab using Hydra, I use the following command;
hydra -L /usr/share/ncrack/minimal.usr -P /usr/share/wordlists/s1.txt -f -V 192.168.99.22 telnet
The ...
3
votes
2answers
187 views
Is there a cryptographic disadvantage to applying bcrypt to an already hashed password
I originally asked this on stackoverflow, but due to lack of traction and a recommendation by a user there I have asked it here too.
Imagine a scenario where a client application is sending a ...
1
vote
0answers
22 views
John the Ripper modify passwords before checking
Assume I have a password I want to crack in the following format:
100 times the character 'a' prepended to
Some word found in a wordlist
John will probably not be able to crack this with the default ...
1
vote
1answer
162 views
Unknown round length makes hash uncrackable?
So I am on an engagement and grabbed some hashes but cracking them has come to no avail. I believe I know the hash type (PBKDF2-HMAC-SHA256) but I am not sure what round size they used. This got me ...
3
votes
1answer
168 views
Time to crack passphrase of 4 English word combinations at 7 terahashes/sec
This site suggests using 4 common English words as a password is no longer safe.
Apparently the top 5000 English words in any combination of 4 words can be hashed in 1.5 minutes at 7Thash/sec.
The ...
2
votes
0answers
106 views
Breaking my own encryption scheme from the eighties [closed]
In the 80's, I wrote an encryption program for some small data files (10-20 K). It's purely EOR-based so both encryption and decryption is identical and can toggle back and forth infinitely.
The user ...
0
votes
1answer
572 views
Simple Hydra test with Windows RDP
I am using VMware and have 3 VMs all on the NAT network with DHCP. All three machines can ping each other. From one windows to the other windows, I can RDP into the 192.168.190.130 windows machine ...
26
votes
12answers
16k views
Reusing passwords that can possibly never be cracked
Reusing passwords pose as a terrible risk for users because in the event of a data breach, with the passwords not being stored securely enough, this means that, by default, all other services that ...
1
vote
1answer
269 views
Using Windows LSA Hashes obtained from crackmapexec
I have obtained some hashes using crackmapexec and dumping from the LSA process. The hashes are in this form (data below is fake):
adm_name:c6f132a235209036744ba5d303bd5d9b:SOME.ORGANISATION.COM:...
2
votes
1answer
218 views
Tools and computer specs for password cracking [closed]
To polish my penetration testing skills I want to attempt to crack NTLM/NTLMv2 hashes (via dictionary/wordlist attack) extracted from Active Directory / SAM database, where the underlying passwords ...
3
votes
2answers
299 views
Change the function such that there are no more side-channels
Given is the function compareKey which is a part of a crackme (a binary file). Which side-channel attack can be used to find the right password (password is made up by ASCII coded big and small ...
2
votes
2answers
161 views
Does having a salted password hash make cracking an unsalted hash of the same password easier?
I've been asked to implement a system to prevent reusing passwords on the same account.
The most secure way I know to do this is to compare hashes of the password + a known salt. bcrypt.hash(sha256(...
1
vote
1answer
316 views
How is it that tools like Hashcat, JTR able to bruteforce an NTLMv2 hashes?
With regards to the following question about the feasibility of (brute|dictionary|rainbowtable)-forcing an NTLMv2 hash:
How feasible is it for an attacker to brute-force an NTLMv2 response captured ...
31
votes
9answers
7k views
What considerations do I need to keep in mind when enforcing passphrases?
According to XKCD: Password Strength, if the password consists of “four random common words”, it will be secure and memorable.
I want to make a web application and make users create their passwords ...
0
votes
1answer
128 views
How can we estimate the time and computing resources needed to break or crack an encryption algorithm and/or password?
I am not too familiar with the technical jargon, so bear with me while I explain the issue in simple and naive words. I have looked into many places but still haven't found a solution to this specific ...
3
votes
2answers
488 views
WPA password cracking setup
let's say i am trying to crack a WPA password and i need to create a virtual machine setup for it. What would the setup be if i limit myself with a specific number of hours ( let's say 24 hours and ...
3
votes
1answer
201 views
What are the factors making a WPA2 handshake suitable for cracking?
Days ago I was dumping handshakes of my APs using airodump-ng. I would later use aircrack-ng to crack them using wordlists which would purposely contain the passphrases. However, I noticed that some ...
5
votes
2answers
4k views
How long would it take to brute force an 11 character single-case alphanumeric password?
My previous home wifi router's WPA2 password was permanently fixed to FZ4HBCKHGC8.
How long would it take to crack via brute force?
Or more pragmatically:
How long would it take to exhaust all ...
0
votes
1answer
127 views
What is the weakest scheme in common use for password hashing?
Essentially, what's the next step up from plaintext password storage? I suspect the answer is going to be MD5, but I'm not familiar with a broad enough variety of examples to be sure.
The reason ...
