Collaborate Disseminate
I’m using mimikatz to retrieve a user’s password hashes from Active Directory with the following command:
lsadump::dcsync /user:mimikatz
The user’s password is Pa55w.rd.
The output is
…
Credentials:
Hash NTLM: 377565f7d41787414481a283… Continue reading Why do I see LM hashes stored in Active Directory?
We were going to write, “Once more unto the breach, dear friends, once more”… but it seems to go without saying these days. Continue reading GoTo admits: Customer cloud backups stolen together with decryption key
https://sha256.web-max.ca/index.php#enter
This Website can reverse sha256.
So how is it that it is supposedly a "irreversible one-way function"?
I recently discovered that Patreon uses hash, but what is it?
When I searched it up, I found:
"bcrypt is a password-hashing function designed by Niels Provos and David Mazières, based on the Blowfish cipher and presented at USENIX in … Continue reading How does hash work? [duplicate]
I recently discovered that Patreon uses hash, but what is it?
When I searched it up, I found:
"bcrypt is a password-hashing function designed by Niels Provos and David Mazières, based on the Blowfish cipher and presented at USENIX in … Continue reading How does hash work? [duplicate]
I am trying to scrape publicly available sites by urls. But the problem is I can not understand the urls needed to be accessed.
URLs are like https://ldtax.gov.bd/ldtax-holdings/individual-rashid-print-offline/MVBDSzI4UTYzdUsydFJLZGJwT0x2Z… Continue reading How the hash/code in url is generated [closed]
Is there anything wrong with hashing(with SHA256) the shared secret generated by ECDH that is 384 bits long and using that as the AES key? Is there a difference between that and, say, truncating the 384 bits down to 256.
Edit:
And would th… Continue reading Generating AES 256 key from ECDH P-384
I am currently working on a solution to at least try to implement a working/modern "change password" option to chntpw.
First of all: Windows uses this format in its hive file:
root@rescue /mnt/Windows/System32/config # samdump2 S… Continue reading How to generate actually valid NTLM hash for chntpw (for SAM hive file injection)
I’m working on a website that will require users to insert a valid email address, which will work as their unique user id. This email will not be used for communicating with the user, it is only ever used to verify that a particular user i… Continue reading Are SHA-256 hashes of user emails guaranteed to be unique?
I am taking a SHA256 hash output in hexadecimal (64 hex nibbles), subsequencing it by taking every other character to make it 32 hex nibbles or 128 bits, and formatting it into a UUID string.
This isn’t being used for security purposes, ma… Continue reading Collision probability between truncating vs subsequencing of SHA256 hash to 128 bits?