Collaborate Disseminate
I understand more sha-rounds make it difficult to bruteforce the hashed password in /etc/shadow. Higher rounds also use more CPU processing when executing sudo commands and logging into the Unix account. But what are sha-roun… Continue reading What are SHA-rounds?
I can’t find a tool that supports cracking SHA-1s with different pre and post salts. Any suggestions?
Continue reading Best tool for cracking SHA-1s with unique pre and post salts? [on hold]
I’m currently looking at the security of a KeyCloak implementation, which again uses SAML 2.0 identity provider.
I’m not too familiar with SAML, but during the authentication, the sent SAMLRequest states SigAlg=http%3A%2F%2F… Continue reading SHA1 signature in a SAML request
I got an automated PCI security test result that checked various server configurations. The automated test determined the server to be unsafe due to the use of sha1 algorithm in some elements of the ssh configuration.
The co… Continue reading Are the sha1 hashes used by common ssh configurations insecure?
Scenario:
1000 distinct keys are each prefixed with the same salt, and SHA1 hashed. The hash output is then iteratively SHA1 hashed x times. Let’s start with x is 100.
The specification of the keys is 10 chars length exactly… Continue reading Iterated SHA1 hashing and the effect on rainbow table computation
I have a problem to solve. But not sure if I fully understood it. I know how to find XOR of 2 strings but not sure what to choose for UTF8, is it ASCII? also what output format should i choose to run sha-1? I tried few combin… Continue reading please help me understand this question on XOR strings and sha-1 hash
I have a problem to solve. But not sure if I fully understood it. I know how to find XOR of 2 strings but not sure what to choose for UTF8, is it ASCII? also what output format should i choose to run sha-1? I tried few combin… Continue reading please help me understand this question on XOR strings and sha-1 hash
I wanted to implement PBKDF2 with SHA1 in python using python3. After implementation, my goal was calculating the time of the process. I used random salt and tried multiple rounds for result. So far so good.
My code:
from p… Continue reading Iteration time confusion about PBKDF2 key derivation with SHA1 hash function
Say you have a list of SHA1 hashes which are all encoded with the same salt. All of these are email addresses and you know at least one combination of hash and email address.
Is it possible to use a tool like hashcat to reco… Continue reading Recover SHA1-encoded email addresses
This is probably the common question on stack exchange but I need to know is this really safe as it seems to be?
//Password hashing stage 1
$a_password = sha1($a_password);
$a_password = md5($a_password);
$a_password… Continue reading How secure is my hashing algorithm?