Collaborate Disseminate
I’m working on a lab on PortSwigger.com titled Username enumeration via different responses. While using ffuf to solve the lab, the output keeps returning a 400 status code.
So far this is what I’ve tried. Here is the request payload file,… Continue reading FFUF command returns status code 400, regardless of mode option: clusterbomb, pitchfork, sniper
This is a password recovery project, which is more complex than just generated a wordlist, since using my tries (see below) it seems to be not enough to just generate a wordlist.
I’m trying to recover my old Bitcoin wallet, which I created… Continue reading What’s the most simple approach to this wordlist generation and ruleset problem?
I had a .zip file that was apparently encrypted with AES-256 deflate.
7z l -slt archive.zip | grep Method
Method = AES-256 Deflate
Then I used zip2john to get a "hash" out of it:
archive.zip/archive/flag.pdf:$zip2$*0*3*0*5e6874b… Continue reading How can I understand the zip2john hash format?
My Gmail email address doesn’t have a recovery email and phone number, and I’ve forgotten my password. My password consists of A-Z, a-z, and 0-9.
In Python, I need a script to find the character that my password starts with. So, for exampl… Continue reading A script in Python that can check which letter and number the first character of my password is? [closed]
We assume that we want to log in on a Linux machine. Suppose we have a strong unbreakable password that an attacker cannot gain access to in any scenario. Can 2FA still be more secure in this case?
The motivation for the question is whethe… Continue reading 2FA vs strong hidden password [closed]
Can you please explain how I get Truecrack to attack the USB? I used
truecrack -t Kingston Data Traveler G2 -w pws.txt
Result was: Error Kingston : No such File
Can you explain how I get Truecrack to attack the USB? I clicked on the USB and also tried putting the name of the USB (Kingston Data Traveler G2) in the Truecrack command.
I haven’t been able to figure out how to start the attack as I am … Continue reading How to use Truecrack [closed]
I’ve had this encrypted box I’ve been locked out of for a few years. This week I decided to see if there wasn’t a way I could open it again. As you can guess my search pretty quickly turned up Hashcat and John the ripper.
It’s great that t… Continue reading Is there a simple way to generate complex password wordlists? [closed]
Trying to resurrect a very old ppt file (2003 Office) So, get the hash
python3 ./office2john.py ./<filename>.ppt >hash.txt
After compiling the software under ubuntu (the build passed all its tests)
./src/john/run/john ./hash.txt … Continue reading Why is this successful brute force with John the Ripper unsuccessful as pw
I’ve been given the task of recovering a list of hashed passwords. I am new to python and this is my first and only security course for my degree. However, I am struggling on how to go about solving this problem. The problem is below.
Bel… Continue reading Hash cracking homework question [closed]