Collaborate Disseminate
I’ve recently become curious on how AD works and how hashes are shared between Windows machines. It’s very interesting how there are so many ways to get Windows programs to leak hashes, for example through editing a word docx settings file… Continue reading Responder not collecting hashes in most cases
Lets say Alice and Bob have a secret key k1. This key is 50 chars long and is cryptographically random. Alice generates a cryptographically random string (e.g. 16 chars long) and hashes this string and k1 with an algorithm like pbkfd2 or s… Continue reading Hashing a secret key with a random string to generate a new key
Does anyone know what algorithm or method was used to generate the following hashes?
Z5zDvEuuHnjIKxWozea0Sg==
KX4Xvtt9kYF6Vtqz3kPQ/A==
Kt4PfavKPQ+58KCnkBa3NQ==
XqhC5IdwwGYOPoKII97HBA==
aFZEIhzHqeRCeNWgY9YO7Q==
They’re hashes of hostnames … Continue reading Does anyone know what algorithm generated these hashes? [closed]
For example, sha-256 has a range from I believe zero to 2^256 – 1 if I’m correct. Sha 512 is 2^512. Is there a hashing function out there, publicly accessible with a higher range? Which has a higher range of numbers? Which has the highest … Continue reading What hashing function has the biggest "limit" or highest range of possibilities? [closed]
My responder is still catching hashes from Windows 10 box that has had Netbios over TCP/IP (DHCP scope option) and LLMNR disabled (GP).
The workstation invokes the net view \\responderip and responder displays the hash. Please confirm thi… Continue reading Responder still catching hashes with LLMNR and Netbios over TCP/IP disabled. Is this by design?
251953b58095a2124a758862707c5c98bc2862a85dbff21477e421adcf269dbc
I’ve been looking for a long time how to decipher it, and tried a lot of decoders, but to no avail.
Continue reading I would like help in cracking the hash [closed]
Some days ago I tried to found the password of a file encrypted with AxCrypt 1.x.
I tried both John The Ripper and HashCat, but for unknown reason with the last one I failed.
Since I was not sure JtR could succeed, I made this thread while… Continue reading No hashes loaded in Hashcat [closed]
Some days ago I tried to found the password of a file encrypted with AxCrypt 1.x.
I tried John The Ripper and HashCat, but for unknown reason with the last one I failed, and I will open a new thread about this in the coming days.
Since I w… Continue reading John The Ripper succedeed in finding password without printing it
When I dump the password history hashes stored in the SAM database with mimikatz lsadump::dcsync tool, for every i’th password (re-)set by a SAM account there are two hashes stored by Active Directory (AD): ntlm- i and lm- i. I know storin… Continue reading Can hashes labeled ‘lm’ in SAM database mimikatz dump be another type than (NT)LM?
I’m getting hashes from Windows 10 SAM using samdump2, then pass this to John the Ripper, with the –format=NT and –show arguments, and get:
username::1001:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
1 password h… Continue reading Blank decrypted Windows 10 passwords [duplicate]