Questions tagged [password-cracking]
for questions relating to the cracking of passwords and the practices to mitigate against passwords being cracked.
791
questions
1
vote
0
answers
206
views
Need help cracking a MacOS Catalina password
I have found the hashes for the stored passwords on my mac, I do not have the administrator passwords, I do have the hashes coming from the /var folder. I have tried decrypting it using hashcat but it ...
- 11
0
votes
2
answers
208
views
Is it possible to design a system with two passwords?
Is it possible to design a system with two passwords prompts?
The system will have to prompt for two passwords
The system would have to validate first password before prompting for second password
...
- 1
0
votes
1
answer
919
views
Hashcat brute force - markov chains
Hashcat uses Markov chains by default when using brute force mode. Do they really speed up the cracking since a randomly generated password normally has the same probability for every combination?
- 947
20
votes
2
answers
6k
views
Shouldn’t patterns be just as secure as PINs?
I’ve seen multiple sources online that say that unlock patterns are less safe than ‘random’ PINs.
I was thinking; how come?
From what I see, they would both be just as secure; you chose different ...
- 303
0
votes
1
answer
62
views
What format is this, is it salted, how to solve for salt? [closed]
I am using a third party app which stores tokens inside of a mysql db. I need to confirm the tokens but there is no easy way to get the actual values from the DB due to the interface. Long story short,...
- 103
8
votes
1
answer
9k
views
With password cracking, what is the fastest known password cracking rig in hashes per second? [closed]
To properly assess password strength, I have been trying to research what the fastest known password cracking rig is in hashes per second.
HashCat claims that their software is the world's fastest, ...
- 285
1
vote
0
answers
131
views
Attack on home dir encryption with sddm pam_mount by using password in /etc/shadow
I'm using Debian + sddm + KDE with ONLY home directory encrypted with gocryptfs.
Decrypting is performed with gocryptfs as follows:
PC boots as usual and starts the sddm service
I enter my login ...
1
vote
1
answer
171
views
SCrypt's goal and the role its salt plays
Am I right in stating that SCrypt as an algorithm is useful where many passwords are stored in a database, but not against one specific encryption key derived from one password of one user?
For ...
- 11
0
votes
1
answer
276
views
Using John or hashcat when password stub is leaked by weak crypto
I'm pentesting a system (call it X) which uses an internal secret key. Due to weaknesses in the crypto, I can determine:
The SHA1 hash of the key (stored as a checksum)
With high probability, the ...
- 267
0
votes
0
answers
65
views
Which password is more secure? [duplicate]
Which password is harder to guess/brute-force:
onlysmallletters!
Ez65);k
And also, can you explain your answer?
- 101
4
votes
1
answer
598
views
What does it cost to hack passwords in-terms of time and computation etc?
The below table is making its way around linkedin and I've seen similar before.
Assuming this table is accurate enough I'd like to understand the economics of cracking the passwords.
For example, if ...
- 183
1
vote
1
answer
177
views
Data breach for my router in chrome
I have just logged into my router in Chrome, Win 10.
I got this warning.
I immediately changed the password.
But I have several questions.
Is the message reliable, in the sense that the breach ...
0
votes
2
answers
110
views
Construct a strong, (almost) unique password? [duplicate]
After reading Why use random characters in passwords? it seems to me that one can solve the problem of how to remember a zillion passwords while each one remains secure by constructing each password ...
- 1
1
vote
1
answer
887
views
In hashcat, is there a simple way to set the amount of symbols in the password?
For example, I know a password has to have at least 3 symbols, but I don't know where those symbols are. What is the simplest way to specify this when cracking the password with hashcat? The only ...
- 885
0
votes
1
answer
105
views
Cracking hashes of trivially modified passwords
If I started with “password”, then change it to “password2”, “password3” etc, is that easier to crack the hashes of the set of passwords than if I used only the original password?
Does having the ...
- 2,125
0
votes
1
answer
2k
views
pwdump8-8.2 correct hash for Microsoft Account Win10
I am having a real issue cracking one NT hash i've pulled from my system for a Microsoft Account.
I used - PwDump8.2
I have an admin account unlocked on the system and can access most files.
I know ...
- 5
0
votes
1
answer
856
views
Creating Wordlist from specific characters and numbers using Mentalist or similar program
I have locked myself out of my Win 10 Microsoft account by forgetting my password and need to get back into it. I have extracted the hash for the account.
I've been researching wordlists and hash ...
- 5
0
votes
1
answer
1k
views
crackmapexec continue after finding first match
I am currently trying to solve the RazorBlack room on tryhackme. After enumerating the machine, I created a list of valid usernames and was also able to crack the password of one of the users. Now I ...
user268819
0
votes
0
answers
224
views
Windows 10 user autologin password lost
A while ago I have set up the autologin for my Windows 10 user.
I do not know the password anymore.
I can login to the system (as has autologin now). But I cannot change the password.
Is it possible ...
1
vote
1
answer
1k
views
THC Hydra sends GET request without parameter before actual request with parameter which causes authentication problems
I am using THC Hydra (v9.0) on GNU/Linux to pentest my private API.
The GET route in question requires a key as GET parameter which returns an auth token if the correct key was submitted else "...
- 11
0
votes
1
answer
5k
views
John the ripper not able to crack the password
I generated two hashes from this site:
Plaintext 1 (p1): world
Salt 1 (s1): hello
Hash 1 (h1): 936a185caaa266bb9cbe981e9e05cb78cd732b0b3280eb944412bb6f8f8f07af
Plaintext 2 (p2): world2
Salt 2 (s2)...
- 103
3
votes
3
answers
1k
views
To lighten server load, is hashing a client-side Argon2-hashed password with SHA-256 on the server-side at least as safe as server-side only Argon2?
I am trying to achieve better security in my authentication system implementation with both server-side hashing and client-side hashing. (See the first reference below for more prerequisite knowledge.)...
- 141
1
vote
3
answers
208
views
Does hashing syslog (or similar) make for good passwords?
I thought of an approach to password generation that I haven't heard of anyone else using. It almost seems too good to be true so I wonder what the downsides are. I'm well aware that you shouldn't &...
- 11
2
votes
1
answer
2k
views
Speed up cracking a wpa2.hccapx file in hashcat
I'm trying to do a brute force with Hashcat on windows with a GPU cracking a wpa2.hccapx handshake. Based on my research I know the password is 10 characters, a mix of random lowercase + numbers only
...
- 21
1
vote
1
answer
226
views
Backup + AES-128 encrypted file in Cloud sync
I've some data that I want to backup to the cloud. I also have a file containing personal data, that I need to sync across multiple devices.
At the moment, for this file, locally in my computer, I've ...
- 13
1
vote
1
answer
9k
views
Cracking Lost Password for encrypted 7z file with most characters known
I forgot password to 7z archive encrypted with AES 256. I am fairly certain of most characters however. I know password length is either 8 or 12 characters and if it is 12 I know the last 4 characters....
- 13
0
votes
1
answer
101
views
If a platform/system has brute force protection should I care for a very strong password
If a platform has brute force protection should I worry about creating a very strong password since any attacker would not get a chance to reach enough attempts to crack even the weakest password?
Not ...
- 103
6
votes
3
answers
12k
views
Does john the ripper not support yescrypt?
I'm learning about password attacks using john and am trying to use it for bruteforcing my shaddow file. I created a user called newuser with password stuff and then used
sudo unshadow /etc/passwd /...
- 195
-1
votes
1
answer
183
views
What are the security implications of the password policy for this bank? [duplicate]
I am aware of a bank (redacted for obvious reasons) that has the following password policy.
Only English alphanumeric characters
Min of 8, max of 14 characters
No special characters (ex. !@#$%^&* ...
0
votes
1
answer
783
views
I have been hacked on Facebook multiple times today alone. What do I do?
My Facebook account has had its password changed four times today, and I'm wondering what to do.
The first time, was at 5:02pm. I received an email saying that my password had been changed. I recently ...
- 39
1
vote
1
answer
443
views
What's the point of connecting to another machine with SSH to crack a password?
If anyone has heard of Ippsec and watched his videos, you'll see that when he extracts a password hash from a machine, he doesn't crack it in his own computer, rather, he uses SSH to connect to his ...
- 151
0
votes
1
answer
15k
views
John the Ripper is unable to crack my SHA1 hashed password
John the Ripper is unable to crack my SHA1 hashed password:
john --wordlist=rockyou.txt testing.txt
Whenever I do this in Kali Linux, I get this response:
Loaded 1 password hash (Raw-SHA1 [SHA1 256/...
- 11
0
votes
2
answers
6k
views
Does John the Ripper automatically account for salt and hash?
I have an embedded device running Armbian which I was able to get the drive image from. The entry in /etc/shadow combined with /etc/passwd after unshadowing is this:
root:$6$TV6ML2bG$TncnN/adtU9xaQs/...
0
votes
2
answers
761
views
How does having a password hash speed up cracking vs not having a hash (on-site)?
On Windows, user password hashes are not salted and, on Linux, user password hashes are stored in the same root-owned file as the salt. Given this, in what ways might a bruteforce attack to find the ...
- 331
2
votes
1
answer
446
views
Opening password file with John The Ripper
I have an old Windows domain SMB sniffer file circa 1998 and just out of interest I want to see if I can crack it now with John The Ripper. I believe the file was generated using the L0phtCrack SMB ...
- 21
1
vote
1
answer
162
views
PAKE - What to do when a weakness is found?
In the case of a password hashing function like Argon2, I know that when a weakness is found, you use another password hashing function, wrap it around the existing hashes and calculate the hash of ...
- 717
17
votes
1
answer
8k
views
John the ripper password cracked or not?
I have the shadow file from an embedded device running linux. Trying to use John to crack it. There is only the 'root' hash in the shadow file.
12 seconds in, John finds the password for 'root', but ...
- 171
0
votes
0
answers
158
views
How much entropy is needed for encrypting data locally?
I understand that, when storing data on the cloud or something else that might get leaked to the public, the security margin should be at least 128 bit, 256 bit should be used for data that should ...
- 717
22
votes
4
answers
9k
views
Does password length / complexity make any difference if hashes are leaked?
Password length/complexity only mitigates a brute force attack, correct? In the event of a hash leak, since any algorithm is a fixed length, there could potentially be a pre-image* with a very short / ...
- 323
1
vote
0
answers
353
views
Using John the Ripper for Blockchain.info second password
Is there a way to use JtR for Blockchain.info's (v2) secondary password?
I already tried the blockchain2john.py file, and it does not ask for primary password (which I know already) so it is going to ...
- 61
0
votes
2
answers
2k
views
Is it possible to reverse a hashed password? [duplicate]
Is it possible to reverse a password hashed with bcrypt?
- 17
0
votes
1
answer
1k
views
Hydra hangs after TASKS number of tries
I have dvwa set up and i am using the command:
hydra -IV -t 1 -l admin -P rockyou.txt localhost http-get-form "/vulnerabilities/brute/index.php:username=^USER^&password=^PASS^&Login=Login:...
- 1
0
votes
0
answers
183
views
Cain and Abel Dictionary Attack - How many words?
How many dictionary words in each attempt (e.g. "word1 word2") will Cain and Abel attempt to use before giving up?
I've done some testing and my results seem spotty. For example I've seen it ...
- 101
2
votes
1
answer
1k
views
JTR finishing very quickly with rockyou.txt and not cracking the hash
I've been fumbling through the world of Information Security by going through the HTB challenges, and I've come across an issue I just can't seem to find an answer for. During one of the challenges I'...
0
votes
1
answer
125
views
WEP keystream extraction
After having captured multiple packets with repeated IVs you can perform cipher1 XOR cipher2 which is the same as having cleartext1 XOR cleartext2, and performing cipher1 XOR cleartext1 gives you the ...
0
votes
0
answers
1k
views
Crack Windows 10 password with Cain and Able
A few months ago I reset my Windows password but my keyboard must have had a sticky key or two, effectively changing my password to an unknown password. Out of desperation and a little research I used ...
- 101
0
votes
2
answers
282
views
Avoiding password cracking by using custom hashing procedure?
In summary: the idea behind password cracking is just to replicate the password validation procedure of a web server locally with lots and lots of attempts and check whether the output of that ...
- 3
1
vote
0
answers
2k
views
Hashcat first wordlist then brute force if nothing found
I'm trying to run my hashcat as automated and efficient as possible.
I have a file with NTLM hashes:
607C4CDCDA0EFBF023C4DEA52DF90641
D25ECD13FDDBB542D2E16DA4F9E0333D
AAD063F78DA1183CBD8BD7812FADF9C6
...
- 129
1
vote
1
answer
11k
views
How best to crack password for MacOS encrypted .dmg, given I know the majority of the password content? [closed]
Encrypted .dmg on MacOS High Sierra, tested password before sending for repair. Upon return from repair, password does not work. The possibilities I see are the .dmg file is corrupted, or I'm wrong ...
- 61
1
vote
0
answers
134
views
How much time will Fugaku supercomputer take to generate a wordlist? [closed]
How much time will the Fugaku supercomputer take to generate a wordlist?
Length: 50
Combination: Alphabet(upper/lower) + numbers (0~9)
also, would wordlist generators make a significant time/...
