New answers tagged

1 vote

Crashing the sha1() function in PHP?

Since this is a "learning challenge", I'll present the answer as a "guide" to finding the answer, instead of just straight up telling you what the solution is. You were actually ...
1 vote

Why do I see LM hashes stored in Active Directory?

Without additional info, it's hard to say for certain. Microsoft indicates that LM hashes will not be stored when the user changes passwords. However, in a SANS article by Mike Pilkington, he applies ...
0 votes

Does Rehashing a weak hash with a strong algorithm make it strong?

A lot of good advice here already, just to add a bit more context about "hash shucking". For a nasty breach, one can assume the attackers know user IDs bound to password-hashes bound to ...
1 vote
Accepted

How does hash work?

In computer security or cryptography, a hash is the output of a hashing function. A hashing function or algorithm has a set of desirable attributes for some security requirements: The input is always ...
  • 56
0 votes
Accepted

Generating AES 256 key from ECDH P-384

If you have a 384-bit shared secret and you only need a 256-bit key, then the first 256-bit of shared secret can serve as a session key. This applies only if the shared secret is indistinguishable ...
  • 16
1 vote

How to generate actually valid NTLM hash for chntpw (for SAM hive file injection)

I don't really know what generators you used to calculate the LM hash online, but it isn't correct, the values you got for both hashes are the default values (the ones you get when you hash an empty ...
  • 56

Top 50 recent answers are included