Collaborate Disseminate
I would like to open a mysterious old file that I found on my Hard Disk, the contents of which I do not know nor can I guess from its name (PB-mp4-rar.axx).
The file was password-protected with the program AxCrypt (as intuitable from the e… Continue reading "john –format=axcrypt" is not returning results
I would like to crack the forgotten password of a very old archive file (rar) with JTR or hashcat.
I remember it was starting with a certain number from a set of numbers e.g.
prefix number from the set
Npre= {12,13,25,50,..(a couple more)… Continue reading Cracking passwords following rules with John or hashcat
I download all kinds of stuff from shady places. But I want to be sure there are no nasty viruses in these files. Is it enough if I just check the hash?
For example, when I go https://www.virustotal.com here and upload my file, I think it … Continue reading Is it enough to verify the hash to ensure file is virus free?
I am using a service called "Lootably", and in order to verify postback requests, they require you to verify using a SHA256 hash, like this:
hash("sha256", userID . ip . revenue . currencyReward . "9Zu4zcAvkKFE789h… Continue reading Should I keep this API hash a secret? [closed]
The other day I was asked by a friend to change their forgotten root password of their Linux server.
I have done this procedure many times without a problem, but this time something strange happened and I need an explanation for it.
What I… Continue reading Everytime we restart the Linux serever it looks like the root gets a new password hash [migrated]
This link suggests that MS Teams calls are encrypted and can be verified by reading out the 20-digit security codes found on the endpoint computers.
To protect against a man-in-the-middle attack between the caller and callee, Teams derives… Continue reading Microsoft Teams encryption verification
In the Server hello, I got the below Cipher suite
TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
Now, I know that we are using DHE for the key exchange, we are using RSA for the authentication, and AES for the encryption, and I know the complete pro… Continue reading What’s the use of HMAC or hashing in TLS or SSL inspection
Let’s say we want to generate a hashed value that starts with "abc". Is it computationally cheap to find out an input? Note that here we just want to find any input whose hashed value starts with "abc".
Background
I fou… Continue reading Is it computationally cheap to generate hashes that have a specific prefix?
I have a list of hashes, I need to find the original value of any of them.
So far I know that the hashes are only numbers of length 30. The format should be something like 012524012524012524012524012524.
What is the best way to create an a… Continue reading Best way to bruteforce a list of hashed integers?
During a CTF, I came across a certain hash type which can’t be identified by various tools (hashID, crackstation, hashes.com, etc.)
The data is as so:
– Plaintext : abc123
– Hash : 7inmu7WsEM3erPqQT23neSWBybGgry5QSq4yXdUS+rA=
– Salt : k5m… Continue reading Unknown Hash Type