Questions tagged [password-cracking]
for questions relating to the cracking of passwords and the practices to mitigate against passwords being cracked.
750
questions
4
votes
1
answer
79
views
Why did Microsoft publish the CPassword AES key ca. 2012?
As outlined in Security Bulletin MS14-025, Microsoft acknowledges the way credentials had been stored in the group policy field "CPassword" is insecure and is not to be trusted any more.
...
- 141
1
vote
2
answers
161
views
Is a very long and random password theoretically immune to password cracking?
Suppose a password’s stored hash is exposed in a theoretical mass security breach of a popular service given the following assumptions:
The password is very long (30+ characters)
The password uses a ...
0
votes
0
answers
23
views
Storing app specific PINs on mobile devices for local authentication
Are there any best practices for storing app specific PINs (e.g. 6 digit PIN that isn't part of the device lock screen) on mobile devices (Android/iOS)? I know several banking and authenticator apps ...
- 391
4
votes
1
answer
246
views
Creating a custom wordlist for MS Word
I have a Word document that is password protected. Am I wrong in assuming that if I know nothing about the password that it’s basically a waste of time trying to crack it?
I do remember it’s two short ...
- 51
0
votes
0
answers
31
views
What are the underlying mechanics that make password salting an effective deterrent against Rainbow Tables? [duplicate]
I have a top level familiarity with Rainbow tables (1 ,2 )
I also understand that salting adds a randomly generated alphanumeric string to each password before it gets hashed and put in a database.
My ...
-1
votes
3
answers
162
views
Why are there often random email addresses in known password word lists?
In known wordlists like crackstation.lst there are random emails in the list. Why are they there?
- 122
0
votes
0
answers
26
views
Are there some routers that have WPS, but without a fixed Pin?
My router only seems like to support the push button method, but I thought every router with wps has a fixed wps pin, or am I wrong?
- 122
2
votes
1
answer
98
views
If multiple of the same password have the same hashed value in a database, does that mean the password is not being salted?
I just started a new job last week and I'm asking for a sanity-check before I mention this to anyone. All the new employee accounts are created with the same default password (I know, already a no-no)....
6
votes
2
answers
2k
views
Can you use an FPGA with hashcat?
Hashcat list FPGAs as opencl device type in its help.
- [ OpenCL Device Types ] -
# | Device Type
===+=============
1 | CPU
2 | GPU
3 | FPGA, DSP, Co-Processor
So can you really somehow connect and ...
- 122
1
vote
0
answers
85
views
Need help cracking a MacOS Catalina password
I have found the hashes for the stored passwords on my mac, I do not have the administrator passwords, I do have the hashes coming from the /var folder. I have tried decrypting it using hashcat but it ...
- 11
0
votes
1
answer
82
views
Is it possible to design a system with two passwords?
Is it possible to design a system with two passwords prompts?
The system will have to prompt for two passwords
The system would have to validate first password before prompting for second password
...
- 1
0
votes
1
answer
129
views
Hashcat brute force - markov chains
Hashcat uses Markov chains by default when using brute force mode. Do they really speed up the cracking since a randomly generated password normally has the same probability for every combination?
- 122
20
votes
2
answers
5k
views
Shouldn’t patterns be just as secure as PINs?
I’ve seen multiple sources online that say that unlock patterns are less safe than ‘random’ PINs.
I was thinking; how come?
From what I see, they would both be just as secure; you chose different ...
- 303
0
votes
1
answer
49
views
What format is this, is it salted, how to solve for salt? [closed]
I am using a third party app which stores tokens inside of a mysql db. I need to confirm the tokens but there is no easy way to get the actual values from the DB due to the interface. Long story short,...
- 103
7
votes
1
answer
2k
views
With password cracking, what is the fastest known password cracking rig in hashes per second? [closed]
To properly assess password strength, I have been trying to research what the fastest known password cracking rig is in hashes per second.
HashCat claims that their software is the world's fastest, ...
- 275
1
vote
0
answers
43
views
Attack on home dir encryption with sddm pam_mount by using password in /etc/shadow
I'm using Debian + sddm + KDE with ONLY home directory encrypted with gocryptfs.
Decrypting is performed with gocryptfs as follows:
PC boots as usual and starts the sddm service
I enter my login ...
0
votes
1
answer
42
views
SCrypt's goal and the role its salt plays
Am I right in stating that SCrypt as an algorithm is useful where many passwords are stored in a database, but not against one specific encryption key derived from one password of one user?
For ...
0
votes
1
answer
114
views
Using John or hashcat when password stub is leaked by weak crypto
I'm pentesting a system (call it X) which uses an internal secret key. Due to weaknesses in the crypto, I can determine:
The SHA1 hash of the key (stored as a checksum)
With high probability, the ...
- 245
0
votes
0
answers
50
views
Which password is more secure? [duplicate]
Which password is harder to guess/brute-force:
onlysmallletters!
Ez65);k
And also, can you explain your answer?
- 101
3
votes
1
answer
139
views
What does it cost to hack passwords in-terms of time and computation etc?
The below table is making its way around linkedin and I've seen similar before.
Assuming this table is accurate enough I'd like to understand the economics of cracking the passwords.
For example, if ...
- 173
1
vote
1
answer
70
views
Data breach for my router in chrome
I have just logged into my router in Chrome, Win 10.
I got this warning.
I immediately changed the password.
But I have several questions.
Is the message reliable, in the sense that the breach ...
0
votes
2
answers
80
views
Construct a strong, (almost) unique password? [duplicate]
After reading Why use random characters in passwords? it seems to me that one can solve the problem of how to remember a zillion passwords while each one remains secure by constructing each password ...
- 1
1
vote
1
answer
95
views
In hashcat, is there a simple way to set the amount of symbols in the password?
For example, I know a password has to have at least 3 symbols, but I don't know where those symbols are. What is the simplest way to specify this when cracking the password with hashcat? The only ...
- 875
0
votes
1
answer
79
views
Cracking hashes of trivially modified passwords
If I started with “password”, then change it to “password2”, “password3” etc, is that easier to crack the hashes of the set of passwords than if I used only the original password?
Does having the ...
- 1,823
0
votes
1
answer
430
views
pwdump8-8.2 correct hash for Microsoft Account Win10
I am having a real issue cracking one NT hash i've pulled from my system for a Microsoft Account.
I used - PwDump8.2
I have an admin account unlocked on the system and can access most files.
I know ...
- 5
0
votes
1
answer
151
views
Creating Wordlist from specific characters and numbers using Mentalist or similar program
I have locked myself out of my Win 10 Microsoft account by forgetting my password and need to get back into it. I have extracted the hash for the account.
I've been researching wordlists and hash ...
- 5
0
votes
1
answer
137
views
crackmapexec continue after finding first match
I am currently trying to solve the RazorBlack room on tryhackme. After enumerating the machine, I created a list of valid usernames and was also able to crack the password of one of the users. Now I ...
0
votes
0
answers
106
views
Windows 10 user autologin password lost
A while ago I have set up the autologin for my Windows 10 user.
I do not know the password anymore.
I can login to the system (as has autologin now). But I cannot change the password.
Is it possible ...
1
vote
1
answer
382
views
THC Hydra sends GET request without parameter before actual request with parameter which causes authentication problems
I am using THC Hydra (v9.0) on GNU/Linux to pentest my private API.
The GET route in question requires a key as GET parameter which returns an auth token if the correct key was submitted else "...
- 11
0
votes
1
answer
2k
views
John the ripper not able to crack the password
I generated two hashes from this site:
Plaintext 1 (p1): world
Salt 1 (s1): hello
Hash 1 (h1): 936a185caaa266bb9cbe981e9e05cb78cd732b0b3280eb944412bb6f8f8f07af
Plaintext 2 (p2): world2
Salt 2 (s2)...
- 103
2
votes
3
answers
405
views
To lighten server load, is hashing a client-side Argon2-hashed password with SHA-256 on the server-side at least as safe as server-side only Argon2?
I am trying to achieve better security in my authentication system implementation with both server-side hashing and client-side hashing. (See the first reference below for more prerequisite knowledge.)...
- 131
1
vote
3
answers
187
views
Does hashing syslog (or similar) make for good passwords?
I thought of an approach to password generation that I haven't heard of anyone else using. It almost seems too good to be true so I wonder what the downsides are. I'm well aware that you shouldn't &...
- 11
0
votes
0
answers
466
views
Speed up cracking a wpa2.hccapx file in hashcat
I'm trying to do a brute force with Hashcat on windows with a GPU cracking a wpa2.hccapx handshake. Based on my research I know the password is 10 characters, a mix of random lowercase + numbers only
...
- 1
1
vote
1
answer
139
views
Backup + AES-128 encrypted file in Cloud sync
I've some data that I want to backup to the cloud. I also have a file containing personal data, that I need to sync across multiple devices.
At the moment, for this file, locally in my computer, I've ...
- 13
1
vote
1
answer
1k
views
Cracking Lost Password for encrypted 7z file with most characters known
I forgot password to 7z archive encrypted with AES 256. I am fairly certain of most characters however. I know password length is either 8 or 12 characters and if it is 12 I know the last 4 characters....
- 13
0
votes
1
answer
91
views
If a platform/system has brute force protection should I care for a very strong password
If a platform has brute force protection should I worry about creating a very strong password since any attacker would not get a chance to reach enough attempts to crack even the weakest password?
Not ...
- 103
3
votes
2
answers
3k
views
Does john the ripper not support yescrypt?
I'm learning about password attacks using john and am trying to use it for bruteforcing my shaddow file. I created a user called newuser with password stuff and then used
sudo unshadow /etc/passwd /...
- 165
-1
votes
1
answer
154
views
What are the security implications of the password policy for this bank? [duplicate]
I am aware of a bank (redacted for obvious reasons) that has the following password policy.
Only English alphanumeric characters
Min of 8, max of 14 characters
No special characters (ex. !@#$%^&* ...
0
votes
1
answer
465
views
I have been hacked on Facebook multiple times today alone. What do I do?
My Facebook account has had its password changed four times today, and I'm wondering what to do.
The first time, was at 5:02pm. I received an email saying that my password had been changed. I recently ...
- 39
1
vote
1
answer
219
views
What's the point of connecting to another machine with SSH to crack a password?
If anyone has heard of Ippsec and watched his videos, you'll see that when he extracts a password hash from a machine, he doesn't crack it in his own computer, rather, he uses SSH to connect to his ...
- 151
1
vote
1
answer
5k
views
John the Ripper is unable to crack my SHA1 hashed password
John the Ripper is unable to crack my SHA1 hashed password:
john --wordlist=rockyou.txt testing.txt
Whenever I do this in Kali Linux, I get this response:
Loaded 1 password hash (Raw-SHA1 [SHA1 256/...
- 13
0
votes
2
answers
1k
views
Does John the Ripper automatically account for salt and hash?
I have an embedded device running Armbian which I was able to get the drive image from. The entry in /etc/shadow combined with /etc/passwd after unshadowing is this:
root:$6$TV6ML2bG$TncnN/adtU9xaQs/...
0
votes
2
answers
410
views
How does having a password hash speed up cracking vs not having a hash (on-site)?
On Windows, user password hashes are not salted and, on Linux, user password hashes are stored in the same root-owned file as the salt. Given this, in what ways might a bruteforce attack to find the ...
- 321
1
vote
1
answer
236
views
Opening password file with John The Ripper
I have an old Windows domain SMB sniffer file circa 1998 and just out of interest I want to see if I can crack it now with John The Ripper. I believe the file was generated using the L0phtCrack SMB ...
- 11
1
vote
1
answer
139
views
PAKE - What to do when a weakness is found?
In the case of a password hashing function like Argon2, I know that when a weakness is found, you use another password hashing function, wrap it around the existing hashes and calculate the hash of ...
- 697
17
votes
1
answer
7k
views
John the ripper password cracked or not?
I have the shadow file from an embedded device running linux. Trying to use John to crack it. There is only the 'root' hash in the shadow file.
12 seconds in, John finds the password for 'root', but ...
- 171
0
votes
0
answers
114
views
How much entropy is needed for encrypting data locally?
I understand that, when storing data on the cloud or something else that might get leaked to the public, the security margin should be at least 128 bit, 256 bit should be used for data that should ...
- 697
22
votes
4
answers
8k
views
Does password length / complexity make any difference if hashes are leaked?
Password length/complexity only mitigates a brute force attack, correct? In the event of a hash leak, since any algorithm is a fixed length, there could potentially be a pre-image* with a very short / ...
- 323
1
vote
0
answers
232
views
Using John the Ripper for Blockchain.info second password
Is there a way to use JtR for Blockchain.info's (v2) secondary password?
I already tried the blockchain2john.py file, and it does not ask for primary password (which I know already) so it is going to ...
- 61
0
votes
2
answers
364
views
Is it possible to reverse a hashed password? [duplicate]
Is it possible to reverse a password hashed with bcrypt?
- 17