We’re rewarding the question askers & reputations are being recalculated! Read more.

All Questions

Filter by
Sorted by
Tagged with
1
vote
1answer
414 views

Combined-Dictionary attack with hashcat, for 4 words passphrases?

Reading the new advice on password which seems to spead easily (at least in my workplace), I was wondering how to use hashcat for cracking four-word password hashes? Say I have this hash ...
1
vote
1answer
83 views

Is there any methods available other than brute force and dictionary attacks?

I am curious to know about the wifi attacks. And I have known a little bit about brute force attack and dictionary attack. Is there any other methods available other than these two...?
0
votes
2answers
581 views

Generating multi-word passphrases from a wordlist [closed]

As part of pentesting NT hashes where the underlying passwords are minimum 16 characters of length, I have created a wordlist of common words, sports teams, movies, names, years etc. - inspired by the ...
2
votes
1answer
623 views

Tools and computer specs for password cracking [closed]

To polish my penetration testing skills I want to attempt to crack NTLM/NTLMv2 hashes (via dictionary/wordlist attack) extracted from Active Directory / SAM database, where the underlying passwords ...
-1
votes
1answer
327 views

Crunch wordlist with different number of words

I'm trying to generate a wordlist, but I need some help with it. Let's say I execute the command: crunch 1 1 -p cat dog cow Crunch will generate the following: catcowdog catdogcow cowcatdog ...
27
votes
1answer
10k views

How does the attacker know what algorithm and salt to use in a dictionary attack?

I am curious about password cracking methods like dictionary and brute force attacks. Nowadays passwords are stored as hashes and not plaintext on the server. Then how can the plaintext passwords in ...
2
votes
2answers
922 views

Is it still possible to run an online dictionary attack from a single machine, without anonymisation?

This question concerns dictionary attacks conducted: Over the Internet, using programs like THC Hydra Via protocols such as HTTP, FTP and SMTP I believe I'm right in thinking that: a) due to the ...
1
vote
1answer
387 views

Passwords - extended dictionary vs dictionary attacks

Taking inspiration from Diceware and the other passphrase generators, I took a dictionary of 20k English words and used a script to generate typos of them, resulting in 7M "words", giving 22.7 bits of ...
7
votes
3answers
5k views

Which is faster - brute-forcing, or using a dictionary attack that contains all possible permutations?

Assuming a 6-character password uses the mixalphanumeric charset, giving each character a character set of 62 and the entire password a keyspace of 62^6 = 46.6 billion (if my calculations are correct)....
4
votes
2answers
531 views

What's the correct term form a pre-computed table with password/hash pairs?

The table looks like this: 123456 -> asfty18u78t489yh password -> 89y203rupdifhof something -> 2r892389n89rfsd And the idea is that if you have the hash (asfty18u78t489yh), you know ...
0
votes
1answer
859 views

How to Generate Custom Dictionary For this Password Structure [closed]

I am trying to carry out a dictionary attack for a password that is of this structure: 15 characters Lowercase letters and 0-9 First a five letter word then 4 numbers, then 6 letter word Examples of ...
1
vote
1answer
1k views

Using crunch, but using words like chars

I would like to generate a wordlist that contains words and 2 digit numbers. I want crunch to shuffle them like 15password15, password15, 15password... Is there any way I can do that with crunch or ...
0
votes
1answer
718 views

Generate a password dictionary from simple information [closed]

Suppose that we are going to perform a dictionary attack to crack the password of a known account. If we have some simple information from the account owner, such as first name, surname, age, date of ...
-1
votes
2answers
174 views

Parse weak passwords based on dictionary file or app

I have a question similar to this one: How to create dictionary to prevent weak passwords? What I want to do though is simply check a list of passwords that exist in a text file I have that contains ...
-3
votes
1answer
144 views

need a help with creating a wordlist [duplicate]

i wanna create a 8 digit long password list containing simple & capital letters+all the numbers,but not with stupid passwords like all the 8 digits in numbers or simple or capital..should contain ...
2
votes
1answer
1k views

Passwordlist generation, permutations and long passwords

I was wondering what could be a way of generating a list where the passwords were like: CorrectHorseBatteryStaple BanjoTurtleNinjaHobo PizzaSurfMotherMetal etc... I already fiddled a little with ...
0
votes
2answers
943 views

How does a dictionary attack use it's “words”?

Does it assemble/concatenate the dictionary elements into candidate passwords, or does it just use the dictionary elements/words as passwords (which sounds strange)? I'm wondering about "SmartKey ZIP ...
1
vote
2answers
3k views

Incremental charset with no duplicate adjacent letter [closed]

I'm using John the Ripper and the following charset in the creation of a word list: [Incremental:Upper8] File = $JOHN/upper.chr MinLen = 8 MaxLen = 8 CharCount = 36 The command: john –stdout –...
4
votes
2answers
1k views

I tried to break my WiFi: is 8 uppercase letter strong enough?

My Wi-Fi WPA-PSK password looked pretty weak: 8 uppercase letter. I have checked with another router from the same provider and the pattern is the same. To see how weak this is I tried to hack it ...
2
votes
0answers
95 views

Password cracking based on properties of target [closed]

Many people base their passwords on some characteristics or properties of their persona, which might not even be included in wordlists used for a dictionary attack. If one would put research into ...
3
votes
3answers
3k views

Generate wordlist with exactly 4 letters and 6 numbers in any order?

I need to configure crunch so that it produces a wordlist with the following set of rules: Exactly 10 characters long Contains exactly 4 letters, which have to be a-f (all lowercase) Contains exactly ...
3
votes
2answers
1k views

How to generate a password dictionary for a specific use

I have a locked work file that I need access to. Unfortunately, the company that provided the file is no longer in existence and I can't track anyone down to help me out. The file is encrypted and ...
5
votes
2answers
876 views

XKCD-like passphrases to stdout

I'm trying to find a way to crack XKCD-like passphrases (correcthorsebatterystaple) from word dictionaries. Basically concatenate X number of words from a dictionary file. Right now it honestly doesn'...
1
vote
3answers
829 views

Password Cracking Mandarin Words English Character Set

I'll be looking to perform a domain password audit in which the user will be using english characters but may be 40% Mandarin speakers so I anticipate a large number of names, phrases, or words that ...
5
votes
1answer
6k views

Chinese or “pinyin” wordlists for dictionary attacks

Background: I am currently trying to crack a salted md5 hash which I have recovered from an embedded device running busybox and manufactured in china. I have tried john the ripper using all of the ...
7
votes
3answers
3k views

Password list generation

I've found during a lot of recent pen-tests that companies will use passwords like c0mp4ny@b( for a company called "company abc" Is there any quick and easy way to generate a list of passwords ...