Skip to main content
Royce Williams's user avatar
Royce Williams's user avatar
Royce Williams's user avatar
Royce Williams
  • Member for 12 years, 6 months
  • Last seen this week
2 votes
Accepted

Is there anyway to crack this salted Hash?

10 votes

How do Yubikeys improve security if I am typically also forced to enable other, weaker 2FA methods?

1 vote

Should my password contain part of the service's name?

1 vote

Does 7z or RAR5 offer better resistance to brute force attacks?

0 votes

How can one prevent HTTP-authentication Brute Force Attacks, on PHPmyadmin with CSF-LFD?

1 vote
Accepted

john the ripper tool - how to combine wordlist with incremental modes?

1 vote

How to analyze the security of a custom passphrase?

0 votes

How to use a logical OR in Hashcat rules

0 votes

Why/When does patching CVE-2022-41099 (BitLocker Bypass) require extra steps?

0 votes

how to use hashcat in python?

3 votes
Accepted

Is it secure to expose a salted bcrypt hash IF it is maximum length random secure password?

2 votes
Accepted

SHA256 for hashing 32 cryptographicaly random bytes

1 vote

John The Ripper unable to crack long PDF passwords

2 votes

Does Rehashing a weak hash with a strong algorithm make it strong?

1 vote

Databases for compromised passwords that browsers use

13 votes

Argon2 vs SHA-512, what's better in my case?

1 vote

Using hashcat -s with --increment

4 votes
Accepted

Why are there often random email addresses in known password word lists?

8 votes
Accepted

Can you use an FPGA with hashcat?

12 votes

Is it safe to store a password using a secure hash followed by an insecure hash?

0 votes

How different ldap implementations are generating random salt?

5 votes
Accepted

How can I extract salt from encoded base64 Salted SHA 256 hashed password

2 votes
Accepted

Using John or hashcat when password stub is leaked by weak crypto

1 vote

In hashcat, is there a simple way to set the amount of symbols in the password?

0 votes

Virtual Yubikey

31 votes
Accepted

After a password leak, is there a Levenshtein distance from which one a newly derivated password can be considered safe?

0 votes

is it ok to reveal number of digits in a muti-factor code input screen?

6 votes

How many rounds of Bcrypt to use for security equivalent to SHA256?

4 votes
Accepted

Does john the ripper not support yescrypt?

2 votes
Accepted

Security implications of using a non-hash in the password column

1
2 3 4 5 6