Collaborate Disseminate
I’m currently trying to crack a password-hash in hashcat.
But I’m facing a problem and can’t figure out how to solve it.
I have to substitute the same char with a different rule sometimes (something like sa> OR sa0).
Is there an easy wa… Continue reading How to use a logical OR in Hashcat rules
I’m learning for the university and have to do a Mifare Classic replay attack.
I don’t really know how to do that and hope some of you can help me at least a bit.
The goal is to get the number of iterations after the start of the random nu… Continue reading How to do a Mifare Classic Replay attack [migrated]
In our REST API we write a log entry for every call made, including things like the query string, response code, duration etc… along with a SHA256 hash of the access token used. The thought process behind this is that the hashed values s… Continue reading Logging access tokens
I’m currently studying how to do honeypot detection and was wondering if a possible lead is to analyse how honeypots implement their TCP/IP protocol.
I’ve been looking through the source code for a number of the honeypots (… Continue reading Honeypot detection: How is TCP/IP implemented on honeypots?
In MySQL there are builtin AES_ENCRYPT() and AES_DECRYPT() functions which take the form of:
AES_ENCRYPT(str, key_str)
What length is required for the key_str argument? Can it be variable? What is the minimum and maximum s… Continue reading MySQL AES_ENCRYPT string key length
Is the following Unix command cryptographically secure to randomly generate 20 characters (a-zA-Z0-9 only)?
dd if=/dev/urandom bs=256 count=1 2> /dev/null | LC_ALL=C tr -dc ‘A-Za-z0-9’ | head -c20
Is there a better or more secure way… Continue reading Unix command to generate cryptographically secure random string
Apologies in advance if this topic is too vague, I wanted to get an idea of peoples’ opinions.
Technology now exists that makes photography a unreliable medium in terms of truth.
Image and video editing software allows peop… Continue reading Who is responsible for ensuring that internet users can believe the photos and videos they see online?
If a 3rd party who is malicious manages to get a hold of a SSL private key for domain (ex: xyz.com), but does not have access to the domain registrar or DNS for the domain, how can the 3rd party utilize the SSL private key? W… Continue reading If SSL private key is compromised, what can they do?
If a 3rd party who is malicious manages to get a hold of a SSL private key for domain (ex: xyz.com), but does not have access to the domain registrar or DNS for the domain, how can the 3rd party utilize the SSL private key? W… Continue reading If SSL private key is compromised, what can they do?
I’ve got an embedded device (it’s a wifi camera) that I’ve managed to login on. I copied the passwd file and started john the ripper. It’s taking quite some time.
$ cat passwd
root:9so4MTVQCT0io:0:0:root:/root:/bin/sh
$ jo… Continue reading In cracking a password, does it help to have other easy passwords in the same file?