Collaborate Disseminate
Virtual Forensic Computing (VFC) was first launched to the digital forensic community in 2007. It is the original and still the go to virtualisation solution for the digital forensic investigator.
VFC makes it easy to create a Virtual Machine (VM) &hel… Continue reading VFC 5.2 And VFC Mount
In Immersive Labs lab "Password Hashes II"
What is the plaintext password of ‘hash part 1’ in the shadow file?
shadow.txt contains:
part1:$6$WJ9Y7LHr$S3SdnPsXhCzHetPz0CL6TL7gZdeVK/8DZjWvWuKss7gh8CR1VHkwbJyBufg19.4igURrZ6KkZ1rpE… Continue reading What is the plaintext password of ‘hash part 1’ in the shadow file?
I was trying to figure out if my router has any vulnerabilities someone can exploit to get the login/password to my router’s admin web interface, so I used routersploit from Kali Linux and I got the following output.
Hash found: admin:$1$$… Continue reading How to crack md5crypt hash? – Hashcat or John? [closed]
I’ve been having trouble with this certain salted MD5 hash, even though I know the salt, and I’ve been having trouble finding anywhere online that will crack salted MD5 hashes. All I’m finding is just straight MD5 only. Can anyone point me… Continue reading Cracking known salt MD5 Hashes online [closed]
I have a large database where passwords are stored as strtolower(hex(md5(pass))) (which is a bad way to store passwords, prone to rainbow tables, cheap to dictionary attack, no salt, etc.),
and I’m tasked with switching from md5 to bcrypt,… Continue reading Is bcrypt(strtolower(hex(md5(pass)))) ok for storing passwords? [duplicate]
I am currently developing against a RESTful API that seemingly has a rather weird auth flow.
I got an API key consisting of an ID (public) and a "secret" (which seems to be a UUID).
Now, whenever I want to call the API, I have to… Continue reading Authentication & Authorization via md5(userid + secret + endpoint + payload)?
I’m trying to analyze a SSLv3 connection. The certificate of the server has a "MD5 with RSA" signature. So I was setting up a local man in the middle attack by setting up a local DNS server that would return a local IP address to… Continue reading Forge certificate for man in the middle attack
I downloaded a software that has a login interface. It’s a $100 a month subscription software.
I disassembled the software and found that passwords are being sent by combining them with a hard coded "salt" that everyone can see i… Continue reading Client side password hashing with static salt – did I find a breach?
3.5 million user logins for the MobiFriends dating app are being offered for free on a popular dark web hackers forum. Continue reading Dating app user logins found on hacking forum
I was reading this article https://vad3rblog.wordpress.com/2017/09/11/snmp/ and writing a script to implement the method to brute force the authentication password as described in the article.
However, when calculating MD5 Hashes the hash… Continue reading SNMPv3 Authentication Calculating Hashes?