Questions tagged [password-cracking]
for questions relating to the cracking of passwords and the practices to mitigate against passwords being cracked.
51
questions with no upvoted or accepted answers
3
votes
0answers
781 views
How to “unprotect” malicious workbook without knowing password
Right now I'm looking at an office document (most likely rtf based on it exploiting equation editor) that opens just fine when you double click it, but on further examination in a hex editor and in ...
3
votes
0answers
3k views
Where is the Administrator password for McAfee Endpoint Security stored on the local machine?
Where is the Administrator password for McAfee Endpoint Security stored on the local machine?
I've tried to locate the Administrator password for McAfee Endpoint Security in the registry on the local ...
2
votes
0answers
376 views
Recovered a 7z password with hashcat, but it's not the right one
I am trying to recover a 7z file, but have forgotten the password. It's completely AES-256 encrypted (i.e. not even the filenames are available).
Steps:
Generated hash file with 7z2hashcat.pl
Ran a ...
2
votes
1answer
346 views
How to interpret the attempt information from Hydra
I was performing a Hydra attack on my TP-Link router and for that I prepared a passwords.txt file with 288 passwords.
hydra -l webadmin -P test_creds/passwords.txt xxx.xxx.xxx.xxx ftp
A minute ...
2
votes
0answers
5k views
John the Ripper doesn't use my wordlist file properly
When I use JtR to crack an encrypted zip file I have, it seems like JtR doesn't go through the wordlist I have ... I do the following steps:
$ brew install john-jumbo
$ export PATH=$PATH:/usr/local/...
2
votes
0answers
283 views
The optimal settings of Winrtgen GUI
I'm working with Winrtgen GUI on windows, but I can't fix the right settings to create a rainbow table for a:
password length=1-7
Charset=alpha numeric all space
What are the ideal values to put in ...
2
votes
0answers
860 views
John the Ripper getting slower
I've written my own John the Ripper module and it's at least working. Sadly I'm not that much into John the Ripper to do any performance analysis, so I just started it with a more or less uncrackable ...
2
votes
0answers
211 views
Generate secure one-time codes containing information
I need to create a system that allows a user to enter codes to charge an allowance. Embedded in this code should be the amount to charge the allowance.
The user would pay for a code which would then ...
1
vote
0answers
47 views
Hardware for password cracking
I'm planning to extend my pentest services to Password Cracking, to be more precise: Cracking Active Directory Passwords, extracted from the customers Active Directory in order to check users ...
1
vote
1answer
82 views
What is the minimum secure length for gpg -c file.txt?
I want to use gpg -c with a user-generated password that I can easily remember. Are 16 characters enough? for example would a password similar to "I own 32 houses." be bruteforcable?
1
vote
0answers
26 views
Making custom wordlists for languages besides English
I'm testing a site whose audience doesn't usually have English as their main language. When it comes to non-English, I consider there to be 3 groups
The target language's alphabet is a subset of the ...
1
vote
2answers
107 views
Security of master password in a derived password manager
I am aware of other questions asking similar things as this one, but I believe this design addresses many of the issues raised in those questions. I'm also not concerned with making sure there's no ...
1
vote
0answers
190 views
Recovery of files from a zip containing a directory (unencrypted) and 3 files (encrypred - ZipCrypto Deflate), possibe use of bkcrack?
I have a zip file, Example.zip consisting of a directory Example and three files *.dat. I can see the names of all 3 files. The dat files are encrypted (ZipCrypto Deflate). I'm interested to know if I ...
1
vote
0answers
1k views
PMKID found , but it should be WPA handshake
i was trying to get access in wifi network but i came to something that i need to ask afteraireplay-ng ā0 20 āa [router bssid] āc [client bssid] wlan0mon i expect
WPA handshake
in right top ...
1
vote
1answer
1k views
John the Ripper Custom Dynamic Hash Function Usage
I have created a custom dynamic hash function comprised of a series of different existing hash functions chained together. I'll spare you the exact details because it's for a class assignment.
I've ...
1
vote
0answers
127 views
Logged in with a hacker's email address
I have an active account at ebay-kleinanzeigen.de (like Craigslist in the US).
Today I got a valid email from them that my email address was changed.
On my mac, I opened up my ebay-kleinanzeigen ...
1
vote
0answers
725 views
Can a smartphone's PIN or password be brute-forced in an offline attack?
I know of exhaustive offline dictionary and brute-force attacks against any given online account, but can the same method be applied against phones, either Android/iPhones? Or would any such attack be ...
1
vote
0answers
45 views
Increase password iterations?
Is it possible to strengthen the macOS login password by increasing the number of sha-512 iterations?
1
vote
1answer
4k views
Brute-Forcing DVWA login page with hydra
I'm learning how to brute force web login pages with a popular brute force tool called "Hydra". I'm using Kali Linux (VirtualBox) to do this. I've installed DVWA (Damn Vulnerable Web Application) and ...
1
vote
0answers
884 views
crunch password generation with multiple character sets
I'm trying to use crunch to generate a password list. However, if I add all necessary characters into one character set, as in:
file: charset_huge.lst
complex = [...
1
vote
0answers
38 views
John the Ripper modify passwords before checking
Assume I have a password I want to crack in the following format:
100 times the character 'a' prepended to
Some word found in a wordlist
John will probably not be able to crack this with the default ...
1
vote
0answers
210 views
Using hydra on a website that has the same response for both a wrong and correct password
I got my hands on an old-ish residential gateway with SIP support and two analog phone connections. I want to use it for it's SIP support to use analog phones with my SIP provider. I didn't know the ...
1
vote
0answers
83 views
What are the steps needed to crack one password stored in a web app
If I am an attacker and I just ex-filtrated the web-based user database via SQL injection (including the per user salt) and I want to target ONE password of interest, what are the steps given:
I ...
1
vote
0answers
815 views
Kerberos and brute-force attacks
Suppose that I am the administrator of a system that uses Kerberos and password authentication. How can I make brute-force attacks on userās passwords by an attacker who can capture network traffic ...
1
vote
0answers
651 views
test SSH private key from STDIN
I recently re-encrypted my SSH private key to use the new OpenSSH format with lots of KDF rounds (-o -a 200) (takes about 2 seconds to run on my CPU). Unfortunately, I mistyped my passphrase in ...
1
vote
0answers
87 views
How to safely generate and store a password out of Google OAuth user data (for another REST API)
I have a web app, where users sign in with Google (OAuth 2.0).
This web app uses a REST API (figo.io) in the background, so I have to create an API user with credentials.
Now I have the following ...
1
vote
0answers
751 views
Opening a password protected PDF document with pdf2john
When I try to open the document with a reader I get prompted for a password.
I tried pdf2john:
root@kali:~# ./pdf2john.py test.pdf > hash.txt
test.pdf : File not encrypted
Is pdf2john only for ...
1
vote
0answers
455 views
John the Ripper performance
I have two questions regarding performance of John the Ripper.
Within the format files, there is a variable named MIN_KEYS_PER_CRYPT and MAX_KEYS_PER_CRYPT. How much do they influence the performance....
1
vote
0answers
1k views
John The Ripper and OpenCL on AMD FirePro
Trying to work with John 1.8.0 Jumbo 1 I noticed that OpenCL won't work for me. I used autoconfig (meaning configure and build with the option to enable OpenMPI) in order to build JTR for my Mac Pro. ...
1
vote
0answers
237 views
Can ophcrack crack credential files?
I have obtained some credential files from another pc and would like to decrypt them. These are the ones found under local/roaming profile in Appdata folder
C:\Users\%USER%\Appdata\Microsoft\...
1
vote
1answer
504 views
How to crack a list of hashed passwords given their possibilities
I am trying to crack a number of passwords that have been hashed using SHA-256 using some java code.
I have the hashes available and I also have the possibilities in which the password can be. Some ...
0
votes
0answers
32 views
Are there intrinsically weaknesses in accessing a same payload encrypted with different keys?
Assume we use AES256 to encrypt the same payload 100 times, each with a different key.
An attacker gains access to the 100 encrypted payloads, and nothing else.
Is there some way the attacker can gain ...
0
votes
1answer
131 views
How does john the ripper crack hashes using wordlists?
How does John The Ripper work when trying to crack passphrase of a private ssh key? As in what steps are involved when it tries to do so? What's the role of ssh2john in the whole process?
0
votes
0answers
48 views
Javascript PDF Brute Forcing
I am trying to learn PDF Brute forcing with javascript.
I've read about encryption algorithm of PDF 1.4 documentation here https://www.adobe.com/content/dam/acom/en/devnet/pdf/pdf_reference_archive/...
0
votes
1answer
93 views
routersploit bruteforce cred attcack using http
while i'm trying to do a brutforce attack on my router using routersploit.
Im getting the error
rsf (HTTP Basic/Digest Bruteforce) > run
[*] Running module creds/generic/...
0
votes
0answers
1k views
Decrypting a password-protected 7z file with Delta filter fails
I have made a 7z archive using Delta filter containing a wav file and I have protected it with a password. I am running a terminal in Kali Linux. My problem is that I cannot get the password cracked ...
0
votes
0answers
299 views
John The Ripper 'No password hashes loaded'(see FAQ)
I am trying to learn John. I've been through the FAQ and this tutorial, but am stuck.
I have made a RAR4 password hash. It's super simple. The password is 'test'. I now want to use a tool to crack it.
...
0
votes
0answers
58 views
Recent research on custom hardware to break RSA-1024
In 2003, Adi Shamir and Eran Tromer proposed an ASIC device called TWIRL, which should be able to sieve RSA-1024 using the General Number Field Sieve during a year, "only" using 10-20M$ of investment ...
0
votes
1answer
205 views
John the ripper - ecryptfs - sample not cracked: 0 password hashes cracked
I tried to use john the ripper on the sample :
ecryptfs_sample_metadata.tar (password is 'openwall')
Which I downloaded from here:
https://openwall.info/wiki/john/sample-non-hashes
If i try
sudo ...
0
votes
1answer
572 views
Generate every alphanumerical combination in crunch within 8-20 characters in length
I want to generate combinations in sequential range of the length 8-20 with the following characters:
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890!@#$%^&*()~`";.,/[]-=
How ...
0
votes
0answers
61 views
Issue using John The Ripper
First things first, I'm a newbie so, bear with me...
I created a word list with a combination of a possible password for a certain user using Crunch (it's the dictionary output) and need to use John ...
0
votes
0answers
110 views
How to crack rar file with protected pass with only the AES-256 key?
I have rar with protected pass.But I have the AES-256 key can I crack it and if I can. how?
0
votes
0answers
2k views
Unable to start hashcat in mode 13600 WinZip : Separator Unmatched
I have a zip file containing a JPEG image of size 3.5 MB, encrypted with AES-256. I used WinZip for the creation of the zip file. In order to create the hash of the zip file, I used John The Ripper's ...
0
votes
0answers
53 views
Storing safely files in the cloud - what is the current state of the art encrpytion method for it?
What is considered as safe method to store files in the cloud currently and in the future (quantums) so that no potential hacker could open the file? Which current encryption methods to use for it to ...
0
votes
0answers
89 views
Convincing client to drop password validation rules
My client wants to include some rules to validate the passwords his clients can choose when creating a new account. Since his company handles sensitive client data, I think I want to convince him to ...
0
votes
0answers
2k views
John the ripper 0 password hashes cracked, 38 left
I'm stuck and new to this and would greatly appreciate any assistance!
Kali linux latest build trying to use Jack the Ripper
I have the hashes in a file called userhash.txt
So I try this: (just ...
0
votes
0answers
65 views
Breaking a tough password using john
I'm trying to crack a pretty advanced password on my computer and I've had it running for about a day on john's default settings.
Its gotten through roughly (a day times 23000kp/s) passwords.
I have ...
0
votes
1answer
9k views
Simple Hydra test with Windows RDP
I am using VMware and have 3 VMs all on the NAT network with DHCP. All three machines can ping each other. From one windows to the other windows, I can RDP into the 192.168.190.130 windows machine ...
-1
votes
1answer
419 views
Where can i find a pre-computed 8 caracter uppercase password file/dictionary
To create an all permutations dictionary of an 8 character uppercase only password, I get I can use crunch to make this wordlist and file would roughly be 1.8 - 2Tb in size.
Is there anywhere I can ...
-1
votes
1answer
452 views
Crunch wordlist with different number of words
I'm trying to generate a wordlist, but I need some help with it. Let's say I execute the command:
crunch 1 1 -p cat dog cow
Crunch will generate the following:
catcowdog
catdogcow
cowcatdog
...