Collaborate Disseminate
Some days ago I tried to found the password of a file encrypted with AxCrypt 1.x.
I tried both John The Ripper and HashCat, but for unknown reason with the last one I failed.
Since I was not sure JtR could succeed, I made this thread while… Continue reading No hashes loaded in Hashcat [closed]
Some days ago I tried to found the password of a file encrypted with AxCrypt 1.x.
I tried John The Ripper and HashCat, but for unknown reason with the last one I failed, and I will open a new thread about this in the coming days.
Since I w… Continue reading John The Ripper succedeed in finding password without printing it
When I dump the password history hashes stored in the SAM database with mimikatz lsadump::dcsync tool, for every i’th password (re-)set by a SAM account there are two hashes stored by Active Directory (AD): ntlm- i and lm- i. I know storin… Continue reading Can hashes labeled ‘lm’ in SAM database mimikatz dump be another type than (NT)LM?
I’m getting hashes from Windows 10 SAM using samdump2, then pass this to John the Ripper, with the –format=NT and –show arguments, and get:
username::1001:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
1 password h… Continue reading Blank decrypted Windows 10 passwords [duplicate]
I would like to open a mysterious old file that I found on my Hard Disk, the contents of which I do not know nor can I guess from its name (PB-mp4-rar.axx).
The file was password-protected with the program AxCrypt (as intuitable from the e… Continue reading "john –format=axcrypt" is not returning results
I would like to crack the forgotten password of a very old archive file (rar) with JTR or hashcat.
I remember it was starting with a certain number from a set of numbers e.g.
prefix number from the set
Npre= {12,13,25,50,..(a couple more)… Continue reading Cracking passwords following rules with John or hashcat
I download all kinds of stuff from shady places. But I want to be sure there are no nasty viruses in these files. Is it enough if I just check the hash?
For example, when I go https://www.virustotal.com here and upload my file, I think it … Continue reading Is it enough to verify the hash to ensure file is virus free?
I am using a service called "Lootably", and in order to verify postback requests, they require you to verify using a SHA256 hash, like this:
hash("sha256", userID . ip . revenue . currencyReward . "9Zu4zcAvkKFE789h… Continue reading Should I keep this API hash a secret? [closed]
The other day I was asked by a friend to change their forgotten root password of their Linux server.
I have done this procedure many times without a problem, but this time something strange happened and I need an explanation for it.
What I… Continue reading Everytime we restart the Linux serever it looks like the root gets a new password hash [migrated]
This link suggests that MS Teams calls are encrypted and can be verified by reading out the 20-digit security codes found on the endpoint computers.
To protect against a man-in-the-middle attack between the caller and callee, Teams derives… Continue reading Microsoft Teams encryption verification