The tag has no usage guidance.

learn more… | top users | synonyms

-1
votes
1answer
19 views

How can I estimate the time it takes a certain computer to guess a password?

As cyber security and its exploitation become more prominent and relevant, I find websites such as https://howsecureismypassword.net/ to be very interesting. When the user enters a password, it ...
0
votes
0answers
7 views

Which AMI / Settings to use on Amazon's EC2 Cloud? [on hold]

For the purpose of password recovery (brute-force) of rar archive. I would like to know which type of machine is the BEST/highest performance for this. I read something about "GPU clusters" online, ...
-3
votes
0answers
33 views

How can I crack an encrypted docx file [closed]

So I lost a password of an encrypted docx file so I started looking for software and websites that can manage to crack it. The software I found usually involves bruteforce or dictionary attacks to ...
0
votes
1answer
34 views

How do you crack a ssh password on mac terminal

I was just wandering if it is possible to use a brute force attack on a ssh password(the victims password) on the mac terminal Thanks
0
votes
1answer
45 views

Mikrotik: Ban host if there are too many HTTP requests from it

Yesterday I noticed a strange activity of my humble web server: it was moderately warm, was twitching by HDD heads and LAN activity was unusually high. When I looked to logs, found that some host is ...
1
vote
1answer
27 views

How to configure John The Ripper to use a static string as part of password discovery?

I recendly found an old microcontroller project of mine again and want to use it. Unfortunatly I forgot the password but know the middle of it. Further I get managed to free the shadow file. Is there ...
0
votes
1answer
108 views

Ncrack: Error string: “bad string length 361355397buffer_get_string: buffer error”

when i attempt to use Ncrack with the syntax: ncrack -p 22 -user MyUserName -P passwords.txt MyIPAdress I am hit with the error: bad string length 361355397buffer_get_string: buffer error And ...
0
votes
0answers
74 views

THC Hydra error: math.h

I am currently trying (and struggling) to get THC Hydra working on OS X. When I use the dictionary attack method, everything runs smoothly, however when I attempt to use the '-x' option for a ...
1
vote
2answers
169 views

Large number of failed login attempts - cPanel Hulk Brute Force [duplicate]

Mods: Please note that this question is specifically about a server that is managed via cPanel and WHM, which makes it different than the alleged duplicate question. The past month, my personal web ...
0
votes
1answer
225 views

Unsure if I have understood Hydra syntax correctly?

So, when I see the Hydra help file, this is what it says: Syntax: hydra [[[-l LOGIN|-L FILE] [-p PASS|-P FILE]] | [-C FILE]] [-e nsr] [-o FILE] [-t TASKS] [-M FILE [-T TASKS]] [-w TIME] [-W TIME] ...
1
vote
1answer
239 views

How to increase delay of ssh root access every time login fails

Is there a way in Linux to delay, for example double the delay time, of the ssh root access every time an ssh root login fails from a given IP and them let the delay expire after X minutes of no login ...
0
votes
1answer
2k views

How to get thc-hydra to work from homebrew installation?

I've installed thc-hydra (brute force tool) on my OS X machine using: brew install hydra But when trying to hack the ssh password on my server I get the following error message: [ERROR] Compiled ...
1
vote
1answer
787 views

How to find password on a router (cabled) without a hard reset? brute-force only option?

So I've seen a few post like that on here but none seem to work in my case short of brute-forcing but I've never done it before so I want to be sure of what I'm doing first. Alright here is the deal, ...
0
votes
0answers
700 views

Bully stuck on same pin?

BUlly is trying the same pin again and again why is that. Should i try differnet option suggest me. THE AP i'm bruteforcing has wps lock turned off i check it several times using wash. Command used ...
0
votes
2answers
108 views

Need program to brute force [closed]

we have written an application which involves user and id parameters. We would like to test the app with brute force attack, where login is know, and password is max 6 characters. Is there any ...
0
votes
1answer
900 views

Why hydra doesn't return a valid username&password with a valid supplied username&password

I'm just trying out hydra on OSX Yosemite, installed with brew brew info hydra hydra: stable 8.0 (bottled), HEAD https://www.thc.org/thc-hydra/ /usr/local/Cellar/hydra/8.0_1 (14 files, 1.2M) * ...
1
vote
1answer
3k views

Cracking WPA2 using Intel HD Graphics GPU

I use Linux Kali and yesterday have captured a WPA handshake of my network. I want to crack it's password - but my CPU with aircrack-ng checks only about 2000 keys per second. In my laptop I have got ...
-1
votes
1answer
139 views

My Juniper SRX System-Retry-Options not works, Why?

I have a Juniper-SRX and I want to configure its System-Retry-Options in a way that after 5 unsuccessful attempts to logins for a particular username the device gets locked for the user for 4 ...
0
votes
1answer
803 views

Increase hydra brute force login attempts

I have recently came to know about hydra and i am playing with it using brute force. The number of login attempts are almost 10 attempts / second, I am trying with my password, so if my password ...
0
votes
1answer
175 views

Entering Password in su- through loop

The Scenario is like I have a list of root passwords. But i don't want to keep trying Manually. So i wrote the shell script : for i in {1..26} do su - >>result done and all my ...
-2
votes
2answers
85 views

Is it possible to generate a file from a md5sum (or sha1 or such)?

Is it possible to recreate a file if you have the files md5sum? Or is it only possible through brute-force? Is it any differences between the different algorithms?
0
votes
3answers
2k views

How to brute force attack a phone [closed]

I have an old cell phone that I forgot the password to. You can have unlimited tries to unlock the phone. It has the basic 0-9 input system with 4 characters unlocking the phone. I was wondering if ...
2
votes
1answer
913 views

Duplicate rule in windows firewall

Let's say you have two rules, one that block and the other that allows the connection from the exact same IP. Which rule takes precedence? Here is some context: I created a script that will block any ...
0
votes
0answers
513 views

How to list all possible combinations for a predefined set of words?

A few years back I made a TrueCrypt password with a random combination of a few friends' first names with no names repeated (7 names to be exact). I forgot the sequence and how many names I used. I ...
0
votes
1answer
412 views

Block brute-force on server with http auth behind cloudflare proxies

My server is behind Cloudflare proxies. I have configured simple http authentication to restrict access to some server resources. I'm trying to block brute-force attacks on http auth with fail2ban. ...
0
votes
1answer
761 views

Should I be worried about WPS on EA6500?

I own the Linksys EA6500 and it has WPS with the WPS button. I have disabled WPS (enabled by default) because I remember reading about brute force attacks against WPS routers which have them enabled ...
0
votes
3answers
2k views

how to prevent brute force attack on ssh?

i am running centos. how can i best avoid a brute force attack on my ssh server? I found this list: DenyHosts is a Python based security tool for SSH servers. It is intended to prevent brute force ...
1
vote
2answers
188 views

Do consumer routers implement safeguards against login brute force attacks?

I'm not talking about trying to crack the encryption key, but if malware got onto your computer, and attempted to brute force your router's login password. I know that the majority of people are using ...
1
vote
2answers
1k views

How can I obtain a password from a website using a form using the GET method on an .aspx platform?

I am trying to find out a password for an area of a website that uses the GET method to authenticate correct credentials. The page is an .aspx but I'm not sure if that makes any effective difference. ...
4
votes
1answer
462 views

Preventing Sendmail Brute Force Attack on Solaris 10

I want to dynamically block specific connections that use the same IP address based on a rate or connection limit. Is this possible using Solaris/IPF or some sendmail extension? I want to limit ...
1
vote
1answer
3k views

Password Strength Calculator

I'd like to know how much time does a password cracker would take to break my password that has setup on .rar archive. For Example- If my password has a length of 13 characters which has: 4 Letters ...
3
votes
2answers
1k views

security of and the flaws of having open ports?

Ok, so, here is my my issue. awhile back, a friend wanted to grab some files from me, so I gave him my AFP (Apple File Protocol) address. Much like FTP SSH or SMB. Its cool for mac users and thats ...
2
votes
5answers
11k views

How resistant is BitLocker against brute force attacks on the 48 character recovery key?

I've read this TechNet blog post, but I still can't determine how secure BitLocker is against a malicious user that attempts to brute force attack the recovery password. Is anyone familiar with this? ...
2
votes
1answer
1k views

Compute salt with known plaintext and hash?

I have the string that was used in a webapp with md5 hashing to come up with a hash. I also have the hash. But the md5 of the string doesn't match the hash, so I'm guessing there's a salt involved. Is ...
2
votes
4answers
2k views

brute force password guessing on SSH server isn't going to work?

I'm running an SSH server on my personal computer. The log had many people(or bots?) repeatedly trying to log in to my server (that is before I changed the default port), which made me a little ...
6
votes
10answers
309 views

What are the guidelines for creation of a secure passwords?

What are the best practices to create secure passwords? I would like to make them tougher to crack with brute force tools. Part II Are there any tools that can generate these passwords so I do not ...