Collaborate Disseminate
What components are the most instrumental for brute force cracking and simulation/algorithm testing (avg 1.2 million variations at the end of each test). I am wanting to upgrade from a laptop I have now and build my own setup, my budget is… Continue reading Most crucial hardware for brute force and data processing? [closed]
I am building a web form in PHP, is just for the user to request information about my services or send comments, so I don‘t need the user to be logged with a username and a password, no databse. I have the validation and sanitation scripts… Continue reading Do I need to set up super global SESSION for a web form?
I’m doing a CTF on vulnhub and I need to brute force SSH. I’ve got 6 usernames and 15.000.000 passwords to try so I’m brute-forcing with hydra by running
hydra -L users.txt -P $LIST/rockyou.txt -t 64 -o hydra_bruteforce.txt ssh://grotesque… Continue reading Fastest way to brute force SSH
I’m trying to pentest a Wordpress box that has the XMLRPC endpoint enabled, but it seems to have additional security measures in place that institute IP-based lockout for 24 hours after one failed authentication attempt. The login endpoint… Continue reading How to bypass XMLRPC lockout policy? [closed]
Is it possible to crack a JSON Web Token (JWT) using HS-256 algorithm with hashcat on a normal PC?
hashcat password.txt -m 16500 -a3
How can I calculate how much time it will take?
JWT first section for example eyJhbGciOiJIUzI1NiIsInR5cCI… Continue reading Crack JWT HS256 with hashcat
How can I change the value of src parameter inside the iFrame tag with programs like wfuzz or fuff?
For example I have an iFrame on the server like this:
iframe.php
<html>
<head><title>attack to iFrame</title></h… Continue reading bruteforce attack inside iFrame
I have a server in Oracle Cloud Infrastructure Ashburn. I am using Tailscale to SSH my servers and closed Port 22 in public.
I closed Port 22 on the VCN and left Port 22 open on the server. But no one will access it ’cause I am the only on… Continue reading I am still receiving ssh-bruteforce on my VPS
I have a hosted a simple react website(testing) with nginx webserver and cloudflare as ssl provider.My website is down from few days with cloudflare error 525 "SSL handshake failed".I was pretty sure my SSL keys are not expired,s… Continue reading Can anyone help finding what’s shady things are logged on my nginx webserver? [duplicate]
When I submit an Customer Reference ID in an Android Application it POSTs an Encrypted String to an API Endpoint.
For example, if I enter the following CR ID :
"CR-13261150"
it POSTs the following Encrypted Data:
splainText : &q… Continue reading How to Find Encryption when knowing Input Plain Text and Output Encrypted Text? [duplicate]
Hashcat uses Markov chains by default when using brute force mode. Do they really speed up the cracking since a randomly generated password normally has the same probability for every combination?