Collaborate Disseminate
Taking inspiration from Diceware and the other passphrase generators, I took a dictionary of 20k English words and used a script to generate typos of them, resulting in 7M “words”, giving 22.7 bits of entropy per word compare… Continue reading Passwords – extended dictionary vs dictionary attacks
I have been running a SSH honeypot and a bunch of attempts to breach it have used the term ‘wubao’ to try and gain access to root. Why is it used in dictionary attacks? It seems like a random term and a google search only r… Continue reading What is the significance of the word ‘wubao’? [on hold]
How does hashcat use multithreading, and how would I write a simple dictionary attack, with multithreading, the way hashcat does it, in java?
The ISP that has monopolized the area I live in provides wifi routers that have WPA2 but the password is a 12 digit passphase (if I can even call it that). Here’s the kicker: The first 5 to 7 characters depend on the model of… Continue reading Bruteforce WPA2 with all-digit wordlist
I am implementing a web service and have a daemon process that notices repeated failed login attempts from any given source. If too many occur the IP address is blocked for a given time.
This is similar to the fail2ban or (… Continue reading How to defend against attacker without affecting other users of same NAT gateway
Assuming a 6-character password uses the mixalphanumeric charset, giving each character a character set of 62 and the entire password a keyspace of 62^6 = 46.6 billion (if my calculations are correct)…
Would it be faster t… Continue reading Which is faster – brute-forcing, or using a dictionary attack that contains all possible permutations?
Assuming a 6-character password uses the mixalphanumeric charset, giving each character a character set of 62 and the entire password a keyspace of 62^6 = 46.6 billion (if my calculations are correct), would it be faster to b… Continue reading Which is faster – brute-forcing, or using a dictionary attack that contains all possible permutations?
The table looks like this:
123456 -> asfty18u78t489yh
password -> 89y203rupdifhof
something -> 2r892389n89rfsd
And the idea is that if you have the hash (asfty18u78t489yh), you know the password that gener… Continue reading What’s the correct term form a pre-computed table with password/hash pairs?
I want to generate a password list that has 8 characters like this:
Characters are: Pp|Aa|Ss|Ww|o0|Rr|Dd
First character only can be Pp, second Aa@, …. to end.
How can I make this list using crunch or similar scripts?
… Continue reading How Generate Custom Dictionary Password list
I am trying to carry out a dictionary attack for a password that is of this structure:
15 characters
Lowercase letters and 0-9
First a five letter word then 4 numbers, then 6 letter word
Examples of possible passwords:
c… Continue reading How to Generate Custom Dictionary For this Password Structure