Questions tagged [password-cracking]

for questions relating to the cracking of passwords and the practices to mitigate against passwords being cracked.

Filter by
Sorted by
Tagged with
30
votes
9answers
7k views

What considerations do I need to keep in mind when enforcing passphrases?

According to XKCD: Password Strength, if the password consists of “four random common words”, it will be secure and memorable. I want to make a web application and make users create their passwords ...
0
votes
1answer
352 views

How can we estimate the time and computing resources needed to break or crack an encryption algorithm and/or password?

I am not too familiar with the technical jargon, so bear with me while I explain the issue in simple and naive words. I have looked into many places but still haven't found a solution to this specific ...
3
votes
2answers
2k views

WPA password cracking setup

let's say i am trying to crack a WPA password and i need to create a virtual machine setup for it. What would the setup be if i limit myself with a specific number of hours ( let's say 24 hours and ...
3
votes
1answer
424 views

What are the factors making a WPA2 handshake suitable for cracking?

Days ago I was dumping handshakes of my APs using airodump-ng. I would later use aircrack-ng to crack them using wordlists which would purposely contain the passphrases. However, I noticed that some ...
8
votes
2answers
15k views

How long would it take to brute force an 11 character single-case alphanumeric password?

My previous home wifi router's WPA2 password was permanently fixed to FZ4HBCKHGC8. How long would it take to crack via brute force? Or more pragmatically: How long would it take to exhaust all ...
0
votes
1answer
237 views

What is the weakest scheme in common use for password hashing?

Essentially, what's the next step up from plaintext password storage? I suspect the answer is going to be MD5, but I'm not familiar with a broad enough variety of examples to be sure. The reason ...
3
votes
1answer
10k views

Decrypting SAM hive after Windows 10 anniversary update?

After a lot of frustration I've finally cracked my local Windows 10 password using mimikatz to extract the proper NTLM hash. In particular, samdump2 decrypted the SAM hive into a list of users with "...
4
votes
1answer
2k views

Why won't pdf2john extract the password hash of this encrypted pdf? Getting blank results

New to the community, and to JtR and Hashcat as a whole, but after searching for a few days I couldn't find a solution to this specific problem. I have a password protected PDF file that I'm trying ...
-1
votes
1answer
327 views

Crunch wordlist with different number of words

I'm trying to generate a wordlist, but I need some help with it. Let's say I execute the command: crunch 1 1 -p cat dog cow Crunch will generate the following: catcowdog catdogcow cowcatdog ...
0
votes
1answer
2k views

How can hackers get 1 billion passwords per second?

So I'm interested in Brute Force attacks and I have made them with Python 3 and C++. However, those only reached a max of about 20 million passwords per second. I know for a fact that 1 billion ...
1
vote
0answers
165 views

Using hydra on a website that has the same response for both a wrong and correct password

I got my hands on an old-ish residential gateway with SIP support and two analog phone connections. I want to use it for it's SIP support to use analog phones with my SIP provider. I didn't know the ...
1
vote
1answer
225 views

Can we know what hacker has come up to so far in his attempt?

I have discovered 'accidentally' while searching in my command history, that some one has issued these : passwd w cat /proc/cpuinfo free -m uptime w perl v.py python v.py chmod +x * ./a 94.10 and ...
8
votes
3answers
2k views

Replacing cached domain credentials in SECURITY hive

Windows stores the (NTLM) hashes of local users' passwords in the SAM hive. By booting from a live system (for example), one can not only extract those hashes for offline cracking, but also simply ...
-2
votes
1answer
2k views

Sample Capture Files to Test Password Cracking [closed]

I was wondering if there are sample .cap files that can be downloaded to test password cracking with aircrack or or other tools for my homelab. Thanks!
2
votes
1answer
176 views

GUI exe BruteForce login test

Hi I have created a login page Below. I want to test the security of my exe I do not want to use a captcha or timeout on my exe. Are there any applications specifically designed for bruteforcing .exe ...
5
votes
6answers
797 views

Is a password really necessary? [closed]

For the purposes of security, is there any difference in having a 50 character randomly-generated secret username accompanied by a 50 character randomly-generated secret password, versus a 100 ...
2
votes
1answer
77 views

Get total, not unique, number of cracked passwords from John the Rippers output?

I am giving John the Ripper a file that may contain duplicate hashes, and get output like this: 2g 0:00:00:01 1.600g/s 3.200p/s 3.200c/s 70227C/s 123456789..abc123 Which represents the total number ...
11
votes
2answers
5k views

Mathematically, how long would it take to crack a bcrypt password hash?

So I'm currently using bcrypt to hash passwords with a randomly generated salt (as seen in the pip bcrypt module), with 12 rounds. I have been looking around, but I cannot find a detailed and clear ...
0
votes
1answer
99 views

How to Remotely Retrieve Password Hash from Computer

Just for fun, I wanted to see if I could remotely extract the password hash of my own user account on my own Mac. Assume that the device is running either the latest version of macOS Sierra (10.12.6) ...
2
votes
1answer
1k views

Recover password that contains known phrase

I want to recover a long password with hashcat. The password contains a phrase and between the words are special character sequences. These sequences are limited (< 4) and unknown. But the set of ...
1
vote
0answers
81 views

What are the steps needed to crack one password stored in a web app

If I am an attacker and I just ex-filtrated the web-based user database via SQL injection (including the per user salt) and I want to target ONE password of interest, what are the steps given: I ...
1
vote
3answers
281 views

Password broken = compromised?

Recently my account in a social network has been attacked. The attacker managed to break the password, but thanks to the 2-factor auth, that wasn't enough to access the account. I have received a ...
3
votes
3answers
216 views

Multiple Passwords Appear to Log Into Single Account on Major Website

I have a single account for a very popular website. I noticed that certain variations of my set password will successfully log me in. I have tested the variations on 3 separate browsers and all have ...
0
votes
1answer
140 views

Is hashing the concatenation of my password and account type secure? [duplicate]

Concept The goal of a password manager is to reduce the number of passwords which one must memorize down to one, and then have all other passwords be encrypted under that master password. My solution ...
27
votes
1answer
10k views

How does the attacker know what algorithm and salt to use in a dictionary attack?

I am curious about password cracking methods like dictionary and brute force attacks. Nowadays passwords are stored as hashes and not plaintext on the server. Then how can the plaintext passwords in ...
1
vote
2answers
1k views

What will the effect of the GDPR be on password dumps? [closed]

The GDPR changes a lot of data protection law, but how will it affect dumped databases of passwords? At the moment these can be used to work out the most common passwords, and sites can use this ...
1
vote
1answer
619 views

How to convert zxcvbn entropy to score

I want to use zxcvbn-c but it gives the entropy number, not score like the javascript library does. How do I convert entropy number to a score? (0 to 4) The zxcvbn blog/source mentions that the score ...
2
votes
1answer
9k views

Hardware compatibility with Hashcat in Windows 10 (64-bit)

This question is not a security question but about a security tool. Why am I unable to leverage my decent hardware (I think) with hashcat? This is what I see when I run hashcat in Win 10 (64-bit). ...
-1
votes
1answer
533 views

How to brute-force a login that uses passwords of a specific format? [closed]

For example, if a website login that uses password of a specific format containing 3 letters and 3 numbers like abc123, qwr345, yta921... What tools on Kali Linux can crack this type of password and ...
1
vote
0answers
719 views

Kerberos and brute-force attacks

Suppose that I am the administrator of a system that uses Kerberos and password authentication. How can I make brute-force attacks on user’s passwords by an attacker who can capture network traffic ...
0
votes
1answer
96 views

Iphone text mystery [closed]

A supervisor at work sent a message to a co-worker and me, asking if either one of us would be available to come in early the next day. I waited about 2 minutes after hearing the text indicator go off ...
-1
votes
1answer
935 views

Is it possible to crack any MD5 hashes (without salt)? [duplicate]

We all know currently MD5 hash can be cracked but I was wondering if any hashes can be cracked since most crackers are searching in their database instead of cracking, so let's pretend we get a ...
2
votes
2answers
233 views

Using an in-browser tabula recta to generate passwords

I've been working on an idea for a stateless password manager, inspired by this blog post. I'm using a in-browser pseudo-random number generator (seedrandom.js) seeded with a user's master password to ...
5
votes
1answer
1k views

Given two passwords, what is the fastest way to compare the strength of them with john?

Given two different known passwords, let's just call them A and B for now, what is the fastest way to compare their strength with John the Ripper? I know that I could just add two users to my Linux ...
3
votes
2answers
410 views

John the ripper - creating specific rules

We have a situation where I am not finding any documentation on it. We are trying to scale across multiple machines/job by breaking up the keyspace by complexity. Its a 7 char completely random ...
2
votes
1answer
2k views

truecrypt volume - Recover 18char known password with hashcat (characters variations)

I have an old truecrypt file that I'd like to decrypt. I know the 18 characters password I was using at the time, I'm sure of it. However I made a "variation" of it : I mapped some characters to l33t ...
1
vote
0answers
31 views

Asus tablet/laptop [closed]

I need to crack my Asus. My roommate put a password on it and I can't figure it out. The password hint on the login page says crazed. If anybody knows how to get in this M.F. P.O.S. It would be ...
3
votes
2answers
851 views

Gmail Account Password Compromised Twice In Two Weeks

I have an many Gmail accounts and I've never had any issues like this. I created a new Gmail account for a new website I created. It has the same name as the website, e.g. something.com and something@...
2
votes
2answers
921 views

Is it still possible to run an online dictionary attack from a single machine, without anonymisation?

This question concerns dictionary attacks conducted: Over the Internet, using programs like THC Hydra Via protocols such as HTTP, FTP and SMTP I believe I'm right in thinking that: a) due to the ...
2
votes
1answer
3k views

Is there any smarter way to crack wpa-2 handshake?

I was testing on my own router that how secure is my password. First I set a random 9 digit number as a password but the aircrack-ng was unable to crack it even in 45 minutes and tried other tools ...
1
vote
1answer
2k views

John the ripper multiple mask attack

I am going to use John the Ripper on a multi-core server to crack about 400 Windows NT hashes. Depending on my CPU capacities I want to check all passwords that satisfy following masks: ?1?1?1?1?1?1?...
-1
votes
1answer
461 views

Decrypting a text encrypted with aes128 cipher algorithm [closed]

I found this challenge from a CS academy site and I was intrigued: A message was encrypted using the following openSSL command. What is the password used to encrypt the message? What is the secret ...
2
votes
3answers
1k views

is the hash of a hash of a password, equally or more safe than hashing just once? [duplicate]

I am told that is quite easy to crack passwords when an attacker obtains a list of hashes of these passwords. This is quite easily compared to hashes of pre-computed common passwords, or brute-force ...
0
votes
1answer
1k views

Efficient Way to Brute Force With Large Wordlist

I am considering attempting to perform an SSH brute force attack on my own device in order to test its security, but I have run into an issue with the wordlist. I know my own password format, as well ...
1
vote
1answer
2k views

How to use character mask in hashcat?

I do not get hashcat working the way I want. I got this handshake captured file. I can crack it with ?a?a?a?a?a?a?a?a --increment but since I know the password is between 14 and 16 charters that is ...
0
votes
1answer
411 views

Using unencrypted parts of encrypted file to recover password (7zip)

I have forgotten the password for an encrypted 7zip file (the filenames are not hidden), and I have copies of some of the unencrypted files. Is there a way I can use this to find out what the password ...
7
votes
4answers
3k views

Password manager vs password book

I have seen a lot of discussion online surrounding whether using password management software is more secure than writing your passwords down on paper and vice versa. However, a lot of this discussion ...
8
votes
2answers
232 views

I'm conducting a study involving passwords, and need a method that assigns a numerical value to the complexity of a password

I'm currently a student and am conducting a science fair project for my high school. The study involves collecting human-generated passwords and testing them for complexity, or "crack-ability," to ...
0
votes
1answer
5k views

Cant crack Responder hashes with John or Hashcat

I ran Responder in a test network and obtained hashes from a Windows machine. The logs for the machine show something like this (some bytes changed for security reasons) and are stored in a file ...
11
votes
3answers
550 views

Why do salts for hashing passwords need to be globally unique, not just system/site-unique?

I was reading an answer by Terry Chia to another question about the requirements for a salt, in which he/she (among others) specified that salts need to be globally unique, but don't go into any ...