Collaborate Disseminate
Iam connected to hackthebox machine throw openvpn, and iam trying to bruteforce a wordpress website on port 80 with hydra but hydra gives me 16 valid passwords.
here is my command
sudo hydra -l admin -P /usr/share/wordlists/rockyou.txt 10…. Continue reading hydra result shows 16 valid passwords? [closed]
Some days ago I tried to found the password of a file encrypted with AxCrypt 1.x.
I tried both John The Ripper and HashCat, but for unknown reason with the last one I failed.
Since I was not sure JtR could succeed, I made this thread while… Continue reading No hashes loaded in Hashcat [closed]
Some days ago I tried to found the password of a file encrypted with AxCrypt 1.x.
I tried John The Ripper and HashCat, but for unknown reason with the last one I failed, and I will open a new thread about this in the coming days.
Since I w… Continue reading John The Ripper succedeed in finding password without printing it
I have a file I encrypted with PGP in 2003. It contains some personal data I’d like to regain access to. I have vague idea of the password, but not enough to successfully guess; but I know its complexity is low. I estimate that search spac… Continue reading Brute forcing lost password for PGP encrypted file (symmetric)
I would like to open a mysterious old file that I found on my Hard Disk, the contents of which I do not know nor can I guess from its name (PB-mp4-rar.axx).
The file was password-protected with the program AxCrypt (as intuitable from the e… Continue reading "john –format=axcrypt" is not returning results
Specops Software released a research analyzing the top passwords used in live attacks against Remote Desktop Protocol (RDP) ports. This analysis coincides with the latest addition of over 34 million compromised passwords to the Specops Breached Passwor… Continue reading Top passwords used in RDP brute-force attacks
I heard recently that WPA2 passwords can be brute forced if somebody captures handshake (which is not very difficult). Can somebody tell if a similar method exists for cracking SSH traffic? I mean some method for brute forcing my password … Continue reading Is brute force for SSH similar to cracking WPA2 handshake?
Is it secure to expose a salted bcrypt hash (minimum 14 cost) if the used password is 72 characters (maximum) byte long, randomly generated letters, numbers, and special characters using secure generator?
Is it secure against offline brute… Continue reading Is it secure to expose a salted bcrypt hash IF it is maximum length random secure password?
I have a list of hashes, I need to find the original value of any of them.
So far I know that the hashes are only numbers of length 30. The format should be something like 012524012524012524012524012524.
What is the best way to create an a… Continue reading Best way to bruteforce a list of hashed integers?
My Windows logs are flooded with what looks like a brute force attack on my machine. I want to be able to block these ports from the outside, but I’m not certain what service this is and what port this is. Does anyone know how I would need… Continue reading How to configure Windows Server 2012 Firewall to block this bot attack?