Questions tagged [password-cracking]
for questions relating to the cracking of passwords and the practices to mitigate against passwords being cracked.
59
questions with no upvoted or accepted answers
3
votes
0answers
1k views
How to "unprotect" malicious workbook without knowing password
Right now I'm looking at an office document (most likely rtf based on it exploiting equation editor) that opens just fine when you double click it, but on further examination in a hex editor and in ...
3
votes
0answers
4k views
Where is the Administrator password for McAfee Endpoint Security stored on the local machine?
Where is the Administrator password for McAfee Endpoint Security stored on the local machine?
I've tried to locate the Administrator password for McAfee Endpoint Security in the registry on the local ...
2
votes
0answers
542 views
Hashcat first wordlist then brute force if nothing found
I'm trying to run my hashcat as automated and efficient as possible.
I have a file with NTLM hashes:
607C4CDCDA0EFBF023C4DEA52DF90641
D25ECD13FDDBB542D2E16DA4F9E0333D
AAD063F78DA1183CBD8BD7812FADF9C6
...
2
votes
0answers
1k views
Recovered a 7z password with hashcat, but it's not the right one
I am trying to recover a 7z file, but have forgotten the password. It's completely AES-256 encrypted (i.e. not even the filenames are available).
Steps:
Generated hash file with 7z2hashcat.pl
Ran a ...
2
votes
1answer
4k views
Decrypting a password-protected 7z file with Delta filter fails
I have made a 7z archive using Delta filter containing a wav file and I have protected it with a password. I am running a terminal in Kali Linux. My problem is that I cannot get the password cracked ...
2
votes
1answer
4k views
PMKID found , but it should be WPA handshake
i was trying to get access in wifi network but i came to something that i need to ask afteraireplay-ng –0 20 –a [router bssid] –c [client bssid] wlan0mon i expect
WPA handshake
in right top ...
2
votes
0answers
894 views
Can a smartphone's PIN or password be brute-forced in an offline attack?
I know of exhaustive offline dictionary and brute-force attacks against any given online account, but can the same method be applied against phones, either Android/iPhones? Or would any such attack be ...
2
votes
0answers
6k views
John the Ripper doesn't use my wordlist file properly
When I use JtR to crack an encrypted zip file I have, it seems like JtR doesn't go through the wordlist I have ... I do the following steps:
$ brew install john-jumbo
$ export PATH=$PATH:/usr/local/...
2
votes
0answers
322 views
The optimal settings of Winrtgen GUI
I'm working with Winrtgen GUI on windows, but I can't fix the right settings to create a rainbow table for a:
password length=1-7
Charset=alpha numeric all space
What are the ideal values to put in ...
2
votes
0answers
984 views
John the Ripper getting slower
I've written my own John the Ripper module and it's at least working. Sadly I'm not that much into John the Ripper to do any performance analysis, so I just started it with a more or less uncrackable ...
2
votes
0answers
242 views
Generate secure one-time codes containing information
I need to create a system that allows a user to enter codes to charge an allowance. Embedded in this code should be the amount to charge the allowance.
The user would pay for a code which would then ...
1
vote
1answer
174 views
Opening password file with John The Ripper
I have an old Windows domain SMB sniffer file circa 1998 and just out of interest I want to see if I can crack it now with John The Ripper. I believe the file was generated using the L0phtCrack SMB ...
1
vote
0answers
190 views
Using John the Ripper for Blockchain.info second password
Is there a way to use JtR for Blockchain.info's (v2) secondary password?
I already tried the blockchain2john.py file, and it does not ask for primary password (which I know already) so it is going to ...
1
vote
0answers
211 views
JTR finishing very quickly with rockyou.txt and not cracking the hash
I've been fumbling through the world of Information Security by going through the HTB challenges, and I've come across an issue I just can't seem to find an answer for. During one of the challenges I'...
1
vote
0answers
443 views
Dynamic format used in John the Ripper jumbo way slower than MDXFind
I'm currently doing some research on a pretty huge list of hashes (approx. 2 millions) and thus I'd like to improve my cracking speed. The hash format is 12 rounds of SHA512(password + salt), which ...
1
vote
0answers
192 views
Hardware for password cracking
I'm planning to extend my pentest services to Password Cracking, to be more precise: Cracking Active Directory Passwords, extracted from the customers Active Directory in order to check users ...
1
vote
0answers
57 views
Making custom wordlists for languages besides English
I'm testing a site whose audience doesn't usually have English as their main language. When it comes to non-English, I consider there to be 3 groups
The target language's alphabet is a subset of the ...
1
vote
1answer
107 views
Does the random presence of a common password sequence within a larger password weaken the password?
I have a somewhat basic understanding of how entropy relates to password strength - generating a password with a truly random selection from some set (whether that's characters, or a set of dictionary ...
1
vote
2answers
213 views
Security of master password in a derived password manager
I am aware of other questions asking similar things as this one, but I believe this design addresses many of the issues raised in those questions. I'm also not concerned with making sure there's no ...
1
vote
0answers
337 views
Recovery of files from a zip containing a directory (unencrypted) and 3 files (encrypred - ZipCrypto Deflate), possibe use of bkcrack?
I have a zip file, Example.zip consisting of a directory Example and three files *.dat. I can see the names of all 3 files. The dat files are encrypted (ZipCrypto Deflate). I'm interested to know if I ...
1
vote
1answer
2k views
John the Ripper Custom Dynamic Hash Function Usage
I have created a custom dynamic hash function comprised of a series of different existing hash functions chained together. I'll spare you the exact details because it's for a class assignment.
I've ...
1
vote
0answers
76 views
Increase password iterations?
Is it possible to strengthen the macOS login password by increasing the number of sha-512 iterations?
1
vote
1answer
5k views
Brute-Forcing DVWA login page with hydra
I'm learning how to brute force web login pages with a popular brute force tool called "Hydra". I'm using Kali Linux (VirtualBox) to do this. I've installed DVWA (Damn Vulnerable Web Application) and ...
1
vote
0answers
1k views
crunch password generation with multiple character sets
I'm trying to use crunch to generate a password list. However, if I add all necessary characters into one character set, as in:
file: charset_huge.lst
complex = [...
1
vote
0answers
76 views
John the Ripper modify passwords before checking
Assume I have a password I want to crack in the following format:
100 times the character 'a' prepended to
Some word found in a wordlist
John will probably not be able to crack this with the default ...
1
vote
0answers
263 views
Using hydra on a website that has the same response for both a wrong and correct password
I got my hands on an old-ish residential gateway with SIP support and two analog phone connections. I want to use it for it's SIP support to use analog phones with my SIP provider. I didn't know the ...
1
vote
0answers
113 views
What are the steps needed to crack one password stored in a web app
If I am an attacker and I just ex-filtrated the web-based user database via SQL injection (including the per user salt) and I want to target ONE password of interest, what are the steps given:
I ...
1
vote
0answers
873 views
Kerberos and brute-force attacks
Suppose that I am the administrator of a system that uses Kerberos and password authentication. How can I make brute-force attacks on user’s passwords by an attacker who can capture network traffic ...
1
vote
0answers
773 views
test SSH private key from STDIN
I recently re-encrypted my SSH private key to use the new OpenSSH format with lots of KDF rounds (-o -a 200) (takes about 2 seconds to run on my CPU). Unfortunately, I mistyped my passphrase in ...
1
vote
0answers
128 views
How to safely generate and store a password out of Google OAuth user data (for another REST API)
I have a web app, where users sign in with Google (OAuth 2.0).
This web app uses a REST API (figo.io) in the background, so I have to create an API user with credentials.
Now I have the following ...
1
vote
0answers
919 views
Opening a password protected PDF document with pdf2john
When I try to open the document with a reader I get prompted for a password.
I tried pdf2john:
root@kali:~# ./pdf2john.py test.pdf > hash.txt
test.pdf : File not encrypted
Is pdf2john only for ...
1
vote
0answers
527 views
John the Ripper performance
I have two questions regarding performance of John the Ripper.
Within the format files, there is a variable named MIN_KEYS_PER_CRYPT and MAX_KEYS_PER_CRYPT. How much do they influence the performance....
1
vote
0answers
1k views
John The Ripper and OpenCL on AMD FirePro
Trying to work with John 1.8.0 Jumbo 1 I noticed that OpenCL won't work for me. I used autoconfig (meaning configure and build with the option to enable OpenMPI) in order to build JTR for my Mac Pro. ...
1
vote
0answers
272 views
Can ophcrack crack credential files?
I have obtained some credential files from another pc and would like to decrypt them. These are the ones found under local/roaming profile in Appdata folder
C:\Users\%USER%\Appdata\Microsoft\...
1
vote
1answer
560 views
How to crack a list of hashed passwords given their possibilities
I am trying to crack a number of passwords that have been hashed using SHA-256 using some java code.
I have the hashes available and I also have the possibilities in which the password can be. Some ...
0
votes
0answers
58 views
crackmapexec continue after finding first match
I am currently trying to solve the RazorBlack room on tryhackme. After enumerating the machine, I created a list of valid usernames and was also able to crack the password of one of the users. Now I ...
0
votes
0answers
84 views
Windows 10 user autologin password lost
A while ago I have set up the autologin for my Windows 10 user.
I do not know the password anymore.
I can login to the system (as has autologin now). But I cannot change the password.
Is it possible ...
0
votes
0answers
338 views
Speed up cracking a wpa2.hccapx file in hashcat
I'm trying to do a brute force with Hashcat on windows with a GPU cracking a wpa2.hccapx handshake. Based on my research I know the password is 10 characters, a mix of random lowercase + numbers only
...
0
votes
0answers
100 views
How much entropy is needed for encrypting data locally?
I understand that, when storing data on the cloud or something else that might get leaked to the public, the security margin should be at least 128 bit, 256 bit should be used for data that should ...
0
votes
0answers
107 views
Cain and Abel Dictionary Attack - How many words?
How many dictionary words in each attempt (e.g. "word1 word2") will Cain and Abel attempt to use before giving up?
I've done some testing and my results seem spotty. For example I've seen it ...
0
votes
0answers
323 views
Crack Windows 10 password with Cain and Able
A few months ago I reset my Windows password but my keyboard must have had a sticky key or two, effectively changing my password to an unknown password. Out of desperation and a little research I used ...
0
votes
0answers
65 views
Are there intrinsically weaknesses in accessing a same payload encrypted with different keys?
Assume we use AES256 to encrypt the same payload 100 times, each with a different key.
An attacker gains access to the 100 encrypted payloads, and nothing else.
Is there some way the attacker can gain ...
0
votes
1answer
288 views
How does john the ripper crack ssh private key passphrases?
How does John The Ripper work when trying to crack passphrase of a private ssh key? What steps are involved when it tries to do so? What's the role of ssh2john in the whole process?
0
votes
1answer
282 views
routersploit bruteforce cred attcack using http
while i'm trying to do a brutforce attack on my router using routersploit.
Im getting the error
rsf (HTTP Basic/Digest Bruteforce) > run
[*] Running module creds/generic/...
0
votes
0answers
541 views
John The Ripper 'No password hashes loaded'(see FAQ)
I am trying to learn John. I've been through the FAQ and this tutorial, but am stuck.
I have made a RAR4 password hash. It's super simple. The password is 'test'. I now want to use a tool to crack it.
...
0
votes
1answer
466 views
John the ripper - ecryptfs - sample not cracked: 0 password hashes cracked
I tried to use john the ripper on the sample :
ecryptfs_sample_metadata.tar (password is 'openwall')
Which I downloaded from here:
https://openwall.info/wiki/john/sample-non-hashes
If i try
sudo ...
0
votes
0answers
100 views
Issue using John The Ripper
First things first, I'm a newbie so, bear with me...
I created a word list with a combination of a possible password for a certain user using Crunch (it's the dictionary output) and need to use John ...
0
votes
0answers
161 views
How to crack rar file with protected pass with only the AES-256 key?
I have rar with protected pass.But I have the AES-256 key can I crack it and if I can. how?
0
votes
0answers
3k views
Unable to start hashcat in mode 13600 WinZip : Separator Unmatched
I have a zip file containing a JPEG image of size 3.5 MB, encrypted with AES-256. I used WinZip for the creation of the zip file. In order to create the hash of the zip file, I used John The Ripper's ...
0
votes
0answers
82 views
Storing safely files in the cloud - what is the current state of the art encrpytion method for it?
What is considered as safe method to store files in the cloud currently and in the future (quantums) so that no potential hacker could open the file? Which current encryption methods to use for it to ...
