Questions tagged [password-cracking]

for questions relating to the cracking of passwords and the practices to mitigate against passwords being cracked.

66 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4 votes
1 answer
14k views

PMKID found , but it should be WPA handshake

i was trying to get access in wifi network but i came to something that i need to ask afteraireplay-ng –0 20 –a [router bssid] –c [client bssid] wlan0mon i expect WPA handshake in right top ...
key's user avatar
  • 41
3 votes
0 answers
2k views

How to "unprotect" malicious workbook without knowing password

Right now I'm looking at an office document (most likely rtf based on it exploiting equation editor) that opens just fine when you double click it, but on further examination in a hex editor and in ...
solumnant's user avatar
  • 133
3 votes
0 answers
2k views

Can a smartphone's PIN or password be brute-forced in an offline attack?

I know of exhaustive offline dictionary and brute-force attacks against any given online account, but can the same method be applied against phones, either Android/iPhones? Or would any such attack be ...
nnad's user avatar
  • 31
3 votes
0 answers
6k views

Where is the Administrator password for McAfee Endpoint Security stored on the local machine?

Where is the Administrator password for McAfee Endpoint Security stored on the local machine? I've tried to locate the Administrator password for McAfee Endpoint Security in the registry on the local ...
Shuzheng's user avatar
  • 1,227
2 votes
0 answers
276 views

Can hashes labeled 'lm' in SAM database mimikatz dump be another type than (NT)LM?

When I dump the password history hashes stored in the SAM database with mimikatz lsadump::dcsync tool, for every i'th password (re-)set by a SAM account there are two hashes stored by Active Directory ...
purple-explorer's user avatar
2 votes
0 answers
338 views

Storing app specific PINs on mobile devices for local authentication

Are there any best practices for storing app specific PINs (e.g. 6 digit PIN that isn't part of the device lock screen) on mobile devices (Android/iOS)? I know several banking and authenticator apps ...
user1118764's user avatar
2 votes
1 answer
512 views

Opening password file with John The Ripper

I have an old Windows domain SMB sniffer file circa 1998 and just out of interest I want to see if I can crack it now with John The Ripper. I believe the file was generated using the L0phtCrack SMB ...
user5820228's user avatar
2 votes
1 answer
2k views

JTR finishing very quickly with rockyou.txt and not cracking the hash

I've been fumbling through the world of Information Security by going through the HTB challenges, and I've come across an issue I just can't seem to find an answer for. During one of the challenges I'...
Jordan Wheeler's user avatar
2 votes
0 answers
164 views

Making custom wordlists for languages besides English

I'm testing a site whose audience doesn't usually have English as their main language. When it comes to non-English, I consider there to be 3 groups The target language's alphabet is a subset of the ...
ChocolateOverflow's user avatar
2 votes
2 answers
394 views

Security of master password in a derived password manager

I am aware of other questions asking similar things as this one, but I believe this design addresses many of the issues raised in those questions. I'm also not concerned with making sure there's no ...
JamesH's user avatar
  • 21
2 votes
0 answers
7k views

John the Ripper doesn't use my wordlist file properly

When I use JtR to crack an encrypted zip file I have, it seems like JtR doesn't go through the wordlist I have ... I do the following steps: $ brew install john-jumbo $ export PATH=$PATH:/usr/local/...
securecurve's user avatar
2 votes
0 answers
397 views

The optimal settings of Winrtgen GUI

I'm working with Winrtgen GUI on windows, but I can't fix the right settings to create a rainbow table for a: password length=1-7 Charset=alpha numeric all space What are the ideal values to put in ...
HassTou's user avatar
  • 21
2 votes
0 answers
1k views

John the Ripper getting slower

I've written my own John the Ripper module and it's at least working. Sadly I'm not that much into John the Ripper to do any performance analysis, so I just started it with a more or less uncrackable ...
Thanathan's user avatar
  • 782
2 votes
0 answers
270 views

Generate secure one-time codes containing information

I need to create a system that allows a user to enter codes to charge an allowance. Embedded in this code should be the amount to charge the allowance. The user would pay for a code which would then ...
narrowtux's user avatar
  • 121
1 vote
0 answers
217 views

"john --format=axcrypt" is not returning results

I would like to open a mysterious old file that I found on my Hard Disk, the contents of which I do not know nor can I guess from its name (PB-mp4-rar.axx). The file was password-protected with the ...
user avatar
1 vote
0 answers
388 views

Cracking passwords following rules with John or hashcat

I would like to crack the forgotten password of a very old archive file (rar) with JTR or hashcat. I remember it was starting with a certain number from a set of numbers e.g. prefix number from the ...
user1806967's user avatar
1 vote
0 answers
256 views

Need help cracking a MacOS Catalina password

I have found the hashes for the stored passwords on my mac, I do not have the administrator passwords, I do have the hashes coming from the /var folder. I have tried decrypting it using hashcat but it ...
ADeveloper's user avatar
1 vote
0 answers
166 views

Attack on home dir encryption with sddm pam_mount by using password in /etc/shadow

I'm using Debian + sddm + KDE with ONLY home directory encrypted with gocryptfs. Decrypting is performed with gocryptfs as follows: PC boots as usual and starts the sddm service I enter my login ...
Dzmitry Sankouski's user avatar
1 vote
0 answers
407 views

Using John the Ripper for Blockchain.info second password

Is there a way to use JtR for Blockchain.info's (v2) secondary password? I already tried the blockchain2john.py file, and it does not ask for primary password (which I know already) so it is going to ...
J. Doe's user avatar
  • 61
1 vote
0 answers
2k views

Hashcat first wordlist then brute force if nothing found

I'm trying to run my hashcat as automated and efficient as possible. I have a file with NTLM hashes: 607C4CDCDA0EFBF023C4DEA52DF90641 D25ECD13FDDBB542D2E16DA4F9E0333D AAD063F78DA1183CBD8BD7812FADF9C6 ...
nameless's user avatar
  • 129
1 vote
0 answers
1k views

Dynamic format used in John the Ripper jumbo way slower than MDXFind

I'm currently doing some research on a pretty huge list of hashes (approx. 2 millions) and thus I'd like to improve my cracking speed. The hash format is 12 rounds of SHA512(password + salt), which ...
Lo Bellin's user avatar
  • 111
1 vote
0 answers
530 views

Hardware for password cracking

I'm planning to extend my pentest services to Password Cracking, to be more precise: Cracking Active Directory Passwords, extracted from the customers Active Directory in order to check users ...
nameless's user avatar
  • 129
1 vote
0 answers
673 views

Recovery of files from a zip containing a directory (unencrypted) and 3 files (encrypred - ZipCrypto Deflate), possibe use of bkcrack?

I have a zip file, Example.zip consisting of a directory Example and three files *.dat. I can see the names of all 3 files. The dat files are encrypted (ZipCrypto Deflate). I'm interested to know if I ...
Dr.Avalanche's user avatar
1 vote
1 answer
3k views

John the Ripper Custom Dynamic Hash Function Usage

I have created a custom dynamic hash function comprised of a series of different existing hash functions chained together. I'll spare you the exact details because it's for a class assignment. I've ...
Jack F.'s user avatar
  • 11
1 vote
0 answers
164 views

Increase password iterations?

Is it possible to strengthen the macOS login password by increasing the number of sha-512 iterations?
user189410's user avatar
1 vote
0 answers
2k views

crunch password generation with multiple character sets

I'm trying to use crunch to generate a password list. However, if I add all necessary characters into one character set, as in: file: charset_huge.lst complex = [...
JohnyD's user avatar
  • 169
1 vote
0 answers
136 views

John the Ripper modify passwords before checking

Assume I have a password I want to crack in the following format: 100 times the character 'a' prepended to Some word found in a wordlist John will probably not be able to crack this with the default ...
Lukor's user avatar
  • 159
1 vote
1 answer
18k views

Simple Hydra test with Windows RDP

I am using VMware and have 3 VMs all on the NAT network with DHCP. All three machines can ping each other. From one windows to the other windows, I can RDP into the 192.168.190.130 windows machine ...
Matthew's user avatar
  • 121
1 vote
0 answers
453 views

Using hydra on a website that has the same response for both a wrong and correct password

I got my hands on an old-ish residential gateway with SIP support and two analog phone connections. I want to use it for it's SIP support to use analog phones with my SIP provider. I didn't know the ...
SolderSmoke's user avatar
1 vote
0 answers
988 views

Kerberos and brute-force attacks

Suppose that I am the administrator of a system that uses Kerberos and password authentication. How can I make brute-force attacks on user’s passwords by an attacker who can capture network traffic ...
Demi's user avatar
  • 879
1 vote
0 answers
983 views

test SSH private key from STDIN

I recently re-encrypted my SSH private key to use the new OpenSSH format with lots of KDF rounds (-o -a 200) (takes about 2 seconds to run on my CPU). Unfortunately, I mistyped my passphrase in ...
user371366's user avatar
1 vote
0 answers
176 views

How to safely generate and store a password out of Google OAuth user data (for another REST API)

I have a web app, where users sign in with Google (OAuth 2.0). This web app uses a REST API (figo.io) in the background, so I have to create an API user with credentials. Now I have the following ...
Eric Lambrecht's user avatar
1 vote
0 answers
1k views

Opening a password protected PDF document with pdf2john

When I try to open the document with a reader I get prompted for a password. I tried pdf2john: root@kali:~# ./pdf2john.py test.pdf > hash.txt test.pdf : File not encrypted Is pdf2john only for ...
One 2's user avatar
  • 11
1 vote
0 answers
657 views

John the Ripper performance

I have two questions regarding performance of John the Ripper. Within the format files, there is a variable named MIN_KEYS_PER_CRYPT and MAX_KEYS_PER_CRYPT. How much do they influence the performance....
Thanathan's user avatar
  • 782
1 vote
0 answers
1k views

John The Ripper and OpenCL on AMD FirePro

Trying to work with John 1.8.0 Jumbo 1 I noticed that OpenCL won't work for me. I used autoconfig (meaning configure and build with the option to enable OpenMPI) in order to build JTR for my Mac Pro. ...
pbx's user avatar
  • 111
1 vote
0 answers
302 views

Can ophcrack crack credential files?

I have obtained some credential files from another pc and would like to decrypt them. These are the ones found under local/roaming profile in Appdata folder C:\Users\%USER%\Appdata\Microsoft\...
Syler's user avatar
  • 151
1 vote
1 answer
802 views

How to crack a list of hashed passwords given their possibilities

I am trying to crack a number of passwords that have been hashed using SHA-256 using some java code. I have the hashes available and I also have the possibilities in which the password can be. Some ...
kquinn's user avatar
  • 11
0 votes
0 answers
99 views

Cracking 1000-password assignment from hashed file

OS: Ubuntu 20.04 on VMWare, tool: John the ripper The whole system is up-to-date The file has 1000 hashed passwords. There are 40 rules provided, a small word list is provided to help crack part of ...
nooonamee's user avatar
0 votes
1 answer
77 views

FFUF command returns status code 400, regardless of mode option: clusterbomb, pitchfork, sniper

I'm working on a lab on PortSwigger.com titled Username enumeration via different responses. While using ffuf to solve the lab, the output keeps returning a 400 status code. So far this is what I've ...
Michael Sodeke's user avatar
0 votes
0 answers
67 views

What's the most simple approach to this wordlist generation and ruleset problem?

This is a password recovery project, which is more complex than just generated a wordlist, since using my tries (see below) it seems to be not enough to just generate a wordlist. I'm trying to recover ...
Sir Muffington's user avatar
0 votes
0 answers
368 views

How can I understand the zip2john hash format?

I had a .zip file that was apparently encrypted with AES-256 deflate. 7z l -slt archive.zip | grep Method Method = AES-256 Deflate Then I used zip2john to get a "hash" out of it: archive....
IRP_HANDLER's user avatar
0 votes
0 answers
617 views

Cracking an MD5 password with little info to go off of

I am taking a security class and part of an assignment this week is to crack a given MD5 hash. All the professor has given us for this task is the hash, the knowledge that the password is 6 or 7 ...
Nick5741's user avatar
0 votes
0 answers
149 views

Variant of words for John

Is it possible to specify a mask (of sorts) on the command like with John the Ripper where most of the words are known (but not the permutations used in the passphrase)? Example: If part of the ...
rfbsurf's user avatar
0 votes
1 answer
388 views

How to use a logical OR in Hashcat rules

I'm currently trying to crack a password-hash in hashcat. But I'm facing a problem and can't figure out how to solve it. I have to substitute the same char with a different rule sometimes (something ...
Justin's user avatar
  • 1
0 votes
2 answers
870 views

Whats the difference between secret and password managers?

Are there fundamental underlying differences in how secrets and passwords should be managed? I'm curious of the technical/cryptographic differences between secret managers and password managers are. ...
alecthompson's user avatar
0 votes
0 answers
513 views

Cracking UTF encoded hash using hashcat

I'm conducting tests using hashcat and find it very difficult if the hash is encoded. See the below function which takes the plain text, converts that to the bytes, creates the SHA512 hash and then ...
Brian Smith's user avatar
0 votes
0 answers
296 views

Windows 10 user autologin password lost

A while ago I have set up the autologin for my Windows 10 user. I do not know the password anymore. I can login to the system (as has autologin now). But I cannot change the password. Is it possible ...
bostongeorge's user avatar
0 votes
0 answers
190 views

How much entropy is needed for encrypting data locally?

I understand that, when storing data on the cloud or something else that might get leaked to the public, the security margin should be at least 128 bit, 256 bit should be used for data that should ...
Gamer2015's user avatar
  • 727
0 votes
0 answers
218 views

Cain and Abel Dictionary Attack - How many words?

How many dictionary words in each attempt (e.g. "word1 word2") will Cain and Abel attempt to use before giving up? I've done some testing and my results seem spotty. For example I've seen it ...
Paul Masek's user avatar
0 votes
0 answers
1k views

Crack Windows 10 password with Cain and Able

A few months ago I reset my Windows password but my keyboard must have had a sticky key or two, effectively changing my password to an unknown password. Out of desperation and a little research I used ...
MPaul's user avatar
  • 101