Information Security

Questions tagged [password-cracking]

Ask Question

for questions relating to the cracking of passwords and the practices to mitigate against passwords being cracked.

51 questions with no upvoted or accepted answers
Newest
Active
Bountied
Unanswered
Filter by
Sorted by
Tagged with
3
votes
0answers
781 views

How to “unprotect” malicious workbook without knowing password

Right now I'm looking at an office document (most likely rtf based on it exploiting equation editor) that opens just fine when you double click it, but on further examination in a hex editor and in ...
3
votes
0answers
3k views

Where is the Administrator password for McAfee Endpoint Security stored on the local machine?

Where is the Administrator password for McAfee Endpoint Security stored on the local machine? I've tried to locate the Administrator password for McAfee Endpoint Security in the registry on the local ...
2
votes
0answers
376 views

Recovered a 7z password with hashcat, but it's not the right one

I am trying to recover a 7z file, but have forgotten the password. It's completely AES-256 encrypted (i.e. not even the filenames are available). Steps: Generated hash file with 7z2hashcat.pl Ran a ...
2
votes
1answer
346 views

How to interpret the attempt information from Hydra

I was performing a Hydra attack on my TP-Link router and for that I prepared a passwords.txt file with 288 passwords. hydra -l webadmin -P test_creds/passwords.txt xxx.xxx.xxx.xxx ftp A minute ...
2
votes
0answers
5k views

John the Ripper doesn't use my wordlist file properly

When I use JtR to crack an encrypted zip file I have, it seems like JtR doesn't go through the wordlist I have ... I do the following steps: $ brew install john-jumbo $ export PATH=$PATH:/usr/local/...
2
votes
0answers
283 views

The optimal settings of Winrtgen GUI

I'm working with Winrtgen GUI on windows, but I can't fix the right settings to create a rainbow table for a: password length=1-7 Charset=alpha numeric all space What are the ideal values to put in ...
2
votes
0answers
860 views

John the Ripper getting slower

I've written my own John the Ripper module and it's at least working. Sadly I'm not that much into John the Ripper to do any performance analysis, so I just started it with a more or less uncrackable ...
2
votes
0answers
211 views

Generate secure one-time codes containing information

I need to create a system that allows a user to enter codes to charge an allowance. Embedded in this code should be the amount to charge the allowance. The user would pay for a code which would then ...
1
vote
0answers
47 views

Hardware for password cracking

I'm planning to extend my pentest services to Password Cracking, to be more precise: Cracking Active Directory Passwords, extracted from the customers Active Directory in order to check users ...
1
vote
1answer
82 views

What is the minimum secure length for gpg -c file.txt?

I want to use gpg -c with a user-generated password that I can easily remember. Are 16 characters enough? for example would a password similar to "I own 32 houses." be bruteforcable?
1
vote
0answers
26 views

Making custom wordlists for languages besides English

I'm testing a site whose audience doesn't usually have English as their main language. When it comes to non-English, I consider there to be 3 groups The target language's alphabet is a subset of the ...
1
vote
2answers
107 views

Security of master password in a derived password manager

I am aware of other questions asking similar things as this one, but I believe this design addresses many of the issues raised in those questions. I'm also not concerned with making sure there's no ...
1
vote
0answers
190 views

Recovery of files from a zip containing a directory (unencrypted) and 3 files (encrypred - ZipCrypto Deflate), possibe use of bkcrack?

I have a zip file, Example.zip consisting of a directory Example and three files *.dat. I can see the names of all 3 files. The dat files are encrypted (ZipCrypto Deflate). I'm interested to know if I ...
1
vote
0answers
1k views

PMKID found , but it should be WPA handshake

i was trying to get access in wifi network but i came to something that i need to ask afteraireplay-ng ā€“0 20 ā€“a [router bssid] ā€“c [client bssid] wlan0mon i expect WPA handshake in right top ...
1
vote
1answer
1k views

John the Ripper Custom Dynamic Hash Function Usage

I have created a custom dynamic hash function comprised of a series of different existing hash functions chained together. I'll spare you the exact details because it's for a class assignment. I've ...
1
vote
0answers
127 views

Logged in with a hacker's email address

I have an active account at ebay-kleinanzeigen.de (like Craigslist in the US). Today I got a valid email from them that my email address was changed. On my mac, I opened up my ebay-kleinanzeigen ...
1
vote
0answers
725 views

Can a smartphone's PIN or password be brute-forced in an offline attack?

I know of exhaustive offline dictionary and brute-force attacks against any given online account, but can the same method be applied against phones, either Android/iPhones? Or would any such attack be ...
1
vote
0answers
45 views

Increase password iterations?

Is it possible to strengthen the macOS login password by increasing the number of sha-512 iterations?
1
vote
1answer
4k views

Brute-Forcing DVWA login page with hydra

I'm learning how to brute force web login pages with a popular brute force tool called "Hydra". I'm using Kali Linux (VirtualBox) to do this. I've installed DVWA (Damn Vulnerable Web Application) and ...
1
vote
0answers
884 views

crunch password generation with multiple character sets

I'm trying to use crunch to generate a password list. However, if I add all necessary characters into one character set, as in: file: charset_huge.lst complex = [...
1
vote
0answers
38 views

John the Ripper modify passwords before checking

Assume I have a password I want to crack in the following format: 100 times the character 'a' prepended to Some word found in a wordlist John will probably not be able to crack this with the default ...
1
vote
0answers
210 views

Using hydra on a website that has the same response for both a wrong and correct password

I got my hands on an old-ish residential gateway with SIP support and two analog phone connections. I want to use it for it's SIP support to use analog phones with my SIP provider. I didn't know the ...
1
vote
0answers
83 views

What are the steps needed to crack one password stored in a web app

If I am an attacker and I just ex-filtrated the web-based user database via SQL injection (including the per user salt) and I want to target ONE password of interest, what are the steps given: I ...
1
vote
0answers
815 views

Kerberos and brute-force attacks

Suppose that I am the administrator of a system that uses Kerberos and password authentication. How can I make brute-force attacks on userā€™s passwords by an attacker who can capture network traffic ...
1
vote
0answers
651 views

test SSH private key from STDIN

I recently re-encrypted my SSH private key to use the new OpenSSH format with lots of KDF rounds (-o -a 200) (takes about 2 seconds to run on my CPU). Unfortunately, I mistyped my passphrase in ...
1
vote
0answers
87 views

How to safely generate and store a password out of Google OAuth user data (for another REST API)

I have a web app, where users sign in with Google (OAuth 2.0). This web app uses a REST API (figo.io) in the background, so I have to create an API user with credentials. Now I have the following ...
1
vote
0answers
751 views

Opening a password protected PDF document with pdf2john

When I try to open the document with a reader I get prompted for a password. I tried pdf2john: root@kali:~# ./pdf2john.py test.pdf > hash.txt test.pdf : File not encrypted Is pdf2john only for ...
1
vote
0answers
455 views

John the Ripper performance

I have two questions regarding performance of John the Ripper. Within the format files, there is a variable named MIN_KEYS_PER_CRYPT and MAX_KEYS_PER_CRYPT. How much do they influence the performance....
1
vote
0answers
1k views

John The Ripper and OpenCL on AMD FirePro

Trying to work with John 1.8.0 Jumbo 1 I noticed that OpenCL won't work for me. I used autoconfig (meaning configure and build with the option to enable OpenMPI) in order to build JTR for my Mac Pro. ...
1
vote
0answers
237 views

Can ophcrack crack credential files?

I have obtained some credential files from another pc and would like to decrypt them. These are the ones found under local/roaming profile in Appdata folder C:\Users\%USER%\Appdata\Microsoft\...
1
vote
1answer
504 views

How to crack a list of hashed passwords given their possibilities

I am trying to crack a number of passwords that have been hashed using SHA-256 using some java code. I have the hashes available and I also have the possibilities in which the password can be. Some ...
0
votes
0answers
32 views

Are there intrinsically weaknesses in accessing a same payload encrypted with different keys?

Assume we use AES256 to encrypt the same payload 100 times, each with a different key. An attacker gains access to the 100 encrypted payloads, and nothing else. Is there some way the attacker can gain ...
0
votes
1answer
131 views

How does john the ripper crack hashes using wordlists?

How does John The Ripper work when trying to crack passphrase of a private ssh key? As in what steps are involved when it tries to do so? What's the role of ssh2john in the whole process?
0
votes
0answers
48 views

Javascript PDF Brute Forcing

I am trying to learn PDF Brute forcing with javascript. I've read about encryption algorithm of PDF 1.4 documentation here https://www.adobe.com/content/dam/acom/en/devnet/pdf/pdf_reference_archive/...
0
votes
1answer
93 views

routersploit bruteforce cred attcack using http

while i'm trying to do a brutforce attack on my router using routersploit. Im getting the error rsf (HTTP Basic/Digest Bruteforce) > run [*] Running module creds/generic/...
0
votes
0answers
1k views

Decrypting a password-protected 7z file with Delta filter fails

I have made a 7z archive using Delta filter containing a wav file and I have protected it with a password. I am running a terminal in Kali Linux. My problem is that I cannot get the password cracked ...
0
votes
0answers
299 views

John The Ripper 'No password hashes loaded'(see FAQ)

I am trying to learn John. I've been through the FAQ and this tutorial, but am stuck. I have made a RAR4 password hash. It's super simple. The password is 'test'. I now want to use a tool to crack it. ...
0
votes
0answers
58 views

Recent research on custom hardware to break RSA-1024

In 2003, Adi Shamir and Eran Tromer proposed an ASIC device called TWIRL, which should be able to sieve RSA-1024 using the General Number Field Sieve during a year, "only" using 10-20M$ of investment ...
0
votes
1answer
205 views

John the ripper - ecryptfs - sample not cracked: 0 password hashes cracked

I tried to use john the ripper on the sample : ecryptfs_sample_metadata.tar (password is 'openwall') Which I downloaded from here: https://openwall.info/wiki/john/sample-non-hashes If i try sudo ...
0
votes
1answer
572 views

Generate every alphanumerical combination in crunch within 8-20 characters in length

I want to generate combinations in sequential range of the length 8-20 with the following characters: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890!@#$%^&*()~`";.,/[]-= How ...
0
votes
0answers
61 views

Issue using John The Ripper

First things first, I'm a newbie so, bear with me... I created a word list with a combination of a possible password for a certain user using Crunch (it's the dictionary output) and need to use John ...
0
votes
0answers
110 views

How to crack rar file with protected pass with only the AES-256 key?

I have rar with protected pass.But I have the AES-256 key can I crack it and if I can. how?
0
votes
0answers
2k views

Unable to start hashcat in mode 13600 WinZip : Separator Unmatched

I have a zip file containing a JPEG image of size 3.5 MB, encrypted with AES-256. I used WinZip for the creation of the zip file. In order to create the hash of the zip file, I used John The Ripper's ...
0
votes
0answers
53 views

Storing safely files in the cloud - what is the current state of the art encrpytion method for it?

What is considered as safe method to store files in the cloud currently and in the future (quantums) so that no potential hacker could open the file? Which current encryption methods to use for it to ...
0
votes
0answers
89 views

Convincing client to drop password validation rules

My client wants to include some rules to validate the passwords his clients can choose when creating a new account. Since his company handles sensitive client data, I think I want to convince him to ...
0
votes
0answers
2k views

John the ripper 0 password hashes cracked, 38 left

I'm stuck and new to this and would greatly appreciate any assistance! Kali linux latest build trying to use Jack the Ripper I have the hashes in a file called userhash.txt So I try this: (just ...
0
votes
0answers
65 views

Breaking a tough password using john

I'm trying to crack a pretty advanced password on my computer and I've had it running for about a day on john's default settings. Its gotten through roughly (a day times 23000kp/s) passwords. I have ...
0
votes
1answer
9k views

Simple Hydra test with Windows RDP

I am using VMware and have 3 VMs all on the NAT network with DHCP. All three machines can ping each other. From one windows to the other windows, I can RDP into the 192.168.190.130 windows machine ...
-1
votes
1answer
419 views

Where can i find a pre-computed 8 caracter uppercase password file/dictionary

To create an all permutations dictionary of an 8 character uppercase only password, I get I can use crunch to make this wordlist and file would roughly be 1.8 - 2Tb in size. Is there anywhere I can ...
-1
votes
1answer
452 views

Crunch wordlist with different number of words

I'm trying to generate a wordlist, but I need some help with it. Let's say I execute the command: crunch 1 1 -p cat dog cow Crunch will generate the following: catcowdog catdogcow cowcatdog ...

1
2