Questions tagged [password-cracking]
for questions relating to the cracking of passwords and the practices to mitigate against passwords being cracked.
65
questions with no upvoted or accepted answers
4
votes
1
answer
12k
views
PMKID found , but it should be WPA handshake
i was trying to get access in wifi network but i came to something that i need to ask afteraireplay-ng –0 20 –a [router bssid] –c [client bssid] wlan0mon i expect
WPA handshake
in right top ...
- 41
3
votes
0
answers
2k
views
How to "unprotect" malicious workbook without knowing password
Right now I'm looking at an office document (most likely rtf based on it exploiting equation editor) that opens just fine when you double click it, but on further examination in a hex editor and in ...
- 133
3
votes
0
answers
6k
views
Where is the Administrator password for McAfee Endpoint Security stored on the local machine?
Where is the Administrator password for McAfee Endpoint Security stored on the local machine?
I've tried to locate the Administrator password for McAfee Endpoint Security in the registry on the local ...
- 1,207
2
votes
0
answers
198
views
Can hashes labeled 'lm' in SAM database mimikatz dump be another type than (NT)LM?
When I dump the password history hashes stored in the SAM database with mimikatz lsadump::dcsync tool, for every i'th password (re-)set by a SAM account there are two hashes stored by Active Directory ...
2
votes
1
answer
423
views
Opening password file with John The Ripper
I have an old Windows domain SMB sniffer file circa 1998 and just out of interest I want to see if I can crack it now with John The Ripper. I believe the file was generated using the L0phtCrack SMB ...
- 21
2
votes
1
answer
1k
views
JTR finishing very quickly with rockyou.txt and not cracking the hash
I've been fumbling through the world of Information Security by going through the HTB challenges, and I've come across an issue I just can't seem to find an answer for. During one of the challenges I'...
2
votes
0
answers
118
views
Making custom wordlists for languages besides English
I'm testing a site whose audience doesn't usually have English as their main language. When it comes to non-English, I consider there to be 3 groups
The target language's alphabet is a subset of the ...
- 3,482
2
votes
2
answers
351
views
Security of master password in a derived password manager
I am aware of other questions asking similar things as this one, but I believe this design addresses many of the issues raised in those questions. I'm also not concerned with making sure there's no ...
- 21
2
votes
0
answers
2k
views
Can a smartphone's PIN or password be brute-forced in an offline attack?
I know of exhaustive offline dictionary and brute-force attacks against any given online account, but can the same method be applied against phones, either Android/iPhones? Or would any such attack be ...
- 21
2
votes
0
answers
7k
views
John the Ripper doesn't use my wordlist file properly
When I use JtR to crack an encrypted zip file I have, it seems like JtR doesn't go through the wordlist I have ... I do the following steps:
$ brew install john-jumbo
$ export PATH=$PATH:/usr/local/...
- 153
2
votes
0
answers
374
views
The optimal settings of Winrtgen GUI
I'm working with Winrtgen GUI on windows, but I can't fix the right settings to create a rainbow table for a:
password length=1-7
Charset=alpha numeric all space
What are the ideal values to put in ...
- 21
2
votes
0
answers
1k
views
John the Ripper getting slower
I've written my own John the Ripper module and it's at least working. Sadly I'm not that much into John the Ripper to do any performance analysis, so I just started it with a more or less uncrackable ...
- 782
2
votes
0
answers
259
views
Generate secure one-time codes containing information
I need to create a system that allows a user to enter codes to charge an allowance. Embedded in this code should be the amount to charge the allowance.
The user would pay for a code which would then ...
- 121
1
vote
0
answers
164
views
"john --format=axcrypt" is not returning results
I would like to open a mysterious old file that I found on my Hard Disk, the contents of which I do not know nor can I guess from its name (PB-mp4-rar.axx).
The file was password-protected with the ...
user285664
1
vote
0
answers
283
views
Cracking passwords following rules with John or hashcat
I would like to crack the forgotten password of a very old archive file (rar) with JTR or hashcat.
I remember it was starting with a certain number from a set of numbers e.g.
prefix number from the ...
- 11
1
vote
0
answers
223
views
Storing app specific PINs on mobile devices for local authentication
Are there any best practices for storing app specific PINs (e.g. 6 digit PIN that isn't part of the device lock screen) on mobile devices (Android/iOS)? I know several banking and authenticator apps ...
- 421
1
vote
0
answers
205
views
Need help cracking a MacOS Catalina password
I have found the hashes for the stored passwords on my mac, I do not have the administrator passwords, I do have the hashes coming from the /var folder. I have tried decrypting it using hashcat but it ...
- 11
1
vote
0
answers
131
views
Attack on home dir encryption with sddm pam_mount by using password in /etc/shadow
I'm using Debian + sddm + KDE with ONLY home directory encrypted with gocryptfs.
Decrypting is performed with gocryptfs as follows:
PC boots as usual and starts the sddm service
I enter my login ...
1
vote
0
answers
353
views
Using John the Ripper for Blockchain.info second password
Is there a way to use JtR for Blockchain.info's (v2) secondary password?
I already tried the blockchain2john.py file, and it does not ask for primary password (which I know already) so it is going to ...
- 61
1
vote
0
answers
2k
views
Hashcat first wordlist then brute force if nothing found
I'm trying to run my hashcat as automated and efficient as possible.
I have a file with NTLM hashes:
607C4CDCDA0EFBF023C4DEA52DF90641
D25ECD13FDDBB542D2E16DA4F9E0333D
AAD063F78DA1183CBD8BD7812FADF9C6
...
- 129
1
vote
0
answers
998
views
Dynamic format used in John the Ripper jumbo way slower than MDXFind
I'm currently doing some research on a pretty huge list of hashes (approx. 2 millions) and thus I'd like to improve my cracking speed. The hash format is 12 rounds of SHA512(password + salt), which ...
- 111
1
vote
0
answers
489
views
Hardware for password cracking
I'm planning to extend my pentest services to Password Cracking, to be more precise: Cracking Active Directory Passwords, extracted from the customers Active Directory in order to check users ...
- 129
1
vote
0
answers
586
views
Recovery of files from a zip containing a directory (unencrypted) and 3 files (encrypred - ZipCrypto Deflate), possibe use of bkcrack?
I have a zip file, Example.zip consisting of a directory Example and three files *.dat. I can see the names of all 3 files. The dat files are encrypted (ZipCrypto Deflate). I'm interested to know if I ...
- 111
1
vote
1
answer
972
views
John the ripper - ecryptfs - sample not cracked: 0 password hashes cracked
I tried to use john the ripper on the sample :
ecryptfs_sample_metadata.tar (password is 'openwall')
Which I downloaded from here:
https://openwall.info/wiki/john/sample-non-hashes
If i try
sudo ...
- 11
1
vote
1
answer
3k
views
John the Ripper Custom Dynamic Hash Function Usage
I have created a custom dynamic hash function comprised of a series of different existing hash functions chained together. I'll spare you the exact details because it's for a class assignment.
I've ...
- 11
1
vote
0
answers
145
views
Increase password iterations?
Is it possible to strengthen the macOS login password by increasing the number of sha-512 iterations?
- 11
1
vote
0
answers
2k
views
crunch password generation with multiple character sets
I'm trying to use crunch to generate a password list. However, if I add all necessary characters into one character set, as in:
file: charset_huge.lst
complex = [...
- 169
1
vote
0
answers
114
views
John the Ripper modify passwords before checking
Assume I have a password I want to crack in the following format:
100 times the character 'a' prepended to
Some word found in a wordlist
John will probably not be able to crack this with the default ...
- 159
1
vote
1
answer
17k
views
Simple Hydra test with Windows RDP
I am using VMware and have 3 VMs all on the NAT network with DHCP. All three machines can ping each other. From one windows to the other windows, I can RDP into the 192.168.190.130 windows machine ...
- 121
1
vote
0
answers
415
views
Using hydra on a website that has the same response for both a wrong and correct password
I got my hands on an old-ish residential gateway with SIP support and two analog phone connections. I want to use it for it's SIP support to use analog phones with my SIP provider. I didn't know the ...
- 11
1
vote
0
answers
961
views
Kerberos and brute-force attacks
Suppose that I am the administrator of a system that uses Kerberos and password authentication. How can I make brute-force attacks on user’s passwords by an attacker who can capture network traffic ...
- 859
1
vote
0
answers
944
views
test SSH private key from STDIN
I recently re-encrypted my SSH private key to use the new OpenSSH format with lots of KDF rounds (-o -a 200) (takes about 2 seconds to run on my CPU). Unfortunately, I mistyped my passphrase in ...
- 436
1
vote
0
answers
154
views
How to safely generate and store a password out of Google OAuth user data (for another REST API)
I have a web app, where users sign in with Google (OAuth 2.0).
This web app uses a REST API (figo.io) in the background, so I have to create an API user with credentials.
Now I have the following ...
1
vote
0
answers
1k
views
Opening a password protected PDF document with pdf2john
When I try to open the document with a reader I get prompted for a password.
I tried pdf2john:
root@kali:~# ./pdf2john.py test.pdf > hash.txt
test.pdf : File not encrypted
Is pdf2john only for ...
- 11
1
vote
0
answers
641
views
John the Ripper performance
I have two questions regarding performance of John the Ripper.
Within the format files, there is a variable named MIN_KEYS_PER_CRYPT and MAX_KEYS_PER_CRYPT. How much do they influence the performance....
- 782
1
vote
0
answers
1k
views
John The Ripper and OpenCL on AMD FirePro
Trying to work with John 1.8.0 Jumbo 1 I noticed that OpenCL won't work for me. I used autoconfig (meaning configure and build with the option to enable OpenMPI) in order to build JTR for my Mac Pro. ...
- 111
1
vote
0
answers
287
views
Can ophcrack crack credential files?
I have obtained some credential files from another pc and would like to decrypt them. These are the ones found under local/roaming profile in Appdata folder
C:\Users\%USER%\Appdata\Microsoft\...
- 151
1
vote
1
answer
741
views
How to crack a list of hashed passwords given their possibilities
I am trying to crack a number of passwords that have been hashed using SHA-256 using some java code.
I have the hashes available and I also have the possibilities in which the password can be. Some ...
- 11
0
votes
0
answers
62
views
How can I understand the zip2john hash format?
I had a .zip file that was apparently encrypted with AES-256 deflate.
7z l -slt archive.zip | grep Method
Method = AES-256 Deflate
Then I used zip2john to get a "hash" out of it:
archive....
0
votes
0
answers
351
views
Cracking an MD5 password with little info to go off of
I am taking a security class and part of an assignment this week is to crack a given MD5 hash.
All the professor has given us for this task is the hash, the knowledge that the password is 6 or 7 ...
- 1
0
votes
1
answer
876
views
Cracking password when knowing the length and the containing letters in relation to digits
Say I want to crack the password of a specific database account, beforehand I know the length of the password and amount of letters in relation to digits, for example LLLLDD (6 in length containing 4 ...
0
votes
0
answers
63
views
Variant of words for John
Is it possible to specify a mask (of sorts) on the command like with John the Ripper where most of the words are known (but not the permutations used in the passphrase)?
Example: If part of the ...
- 1
0
votes
1
answer
241
views
How to use a logical OR in Hashcat rules
I'm currently trying to crack a password-hash in hashcat.
But I'm facing a problem and can't figure out how to solve it.
I have to substitute the same char with a different rule sometimes (something ...
- 1
0
votes
2
answers
602
views
Whats the difference between secret and password managers?
Are there fundamental underlying differences in how secrets and passwords should be managed?
I'm curious of the technical/cryptographic differences between secret managers and password managers are. ...
0
votes
0
answers
394
views
Cracking UTF encoded hash using hashcat
I'm conducting tests using hashcat and find it very difficult if the hash is encoded.
See the below function which takes the plain text, converts that to the bytes, creates the SHA512 hash and then ...
0
votes
0
answers
223
views
Windows 10 user autologin password lost
A while ago I have set up the autologin for my Windows 10 user.
I do not know the password anymore.
I can login to the system (as has autologin now). But I cannot change the password.
Is it possible ...
0
votes
0
answers
157
views
How much entropy is needed for encrypting data locally?
I understand that, when storing data on the cloud or something else that might get leaked to the public, the security margin should be at least 128 bit, 256 bit should be used for data that should ...
- 717
0
votes
0
answers
183
views
Cain and Abel Dictionary Attack - How many words?
How many dictionary words in each attempt (e.g. "word1 word2") will Cain and Abel attempt to use before giving up?
I've done some testing and my results seem spotty. For example I've seen it ...
- 101
0
votes
0
answers
1k
views
Crack Windows 10 password with Cain and Able
A few months ago I reset my Windows password but my keyboard must have had a sticky key or two, effectively changing my password to an unknown password. Out of desperation and a little research I used ...
- 101
0
votes
0
answers
80
views
Are there intrinsically weaknesses in accessing a same payload encrypted with different keys?
Assume we use AES256 to encrypt the same payload 100 times, each with a different key.
An attacker gains access to the 100 encrypted payloads, and nothing else.
Is there some way the attacker can gain ...
- 123