28 votes
Accepted

Automatically 'brute force' a few bytes to recover a corrupt file

Here's a small Python program which does what you seem to be describing. #!/usr/bin/env python3 from hashlib import sha1 with open('binaryfile', 'rb') as bin: binary = bin.read() base = 0x0078 #...
tripleee's user avatar
  • 3,181
22 votes
Accepted

How to force a connection to a site through Chrome (or any other browser's) "Your connection is not private" screen

There is a way to bypass this error, it's a pretty annoying way but it should work. Click anywhere in Chrome window where you see the error, and type thisisunsafe (type it out, not Copy/Paste, despite ...
Yisroel Tech's user avatar
  • 10.7k
4 votes
Accepted

How do I recover the password to a gmail account with hydra?

Non-answer that is actually the correct answer: You don't. This is because brute-force password guessing as a method for account recovery - even for your own account - is against the terms and ...
Royce Williams's user avatar
4 votes

Automatically 'brute force' a few bytes to recover a corrupt file

No, no, no and again NO! Seldom the answer you get is not what you expect. Some questions for you: Is it possible that an expert doesn't know that it is possible to brute force a string of for bytes ...
Hastur's user avatar
  • 18.9k
4 votes
Accepted

Canoga-Perkins Password recovery (Brute-forcing via COM port)

If you are trying this on ubuntu, "sudo apt-get install minicom". Use your favorite search engine and follow a online guide to get crunch on your specific version of Ubuntu. I installed Kali ...
Tim_Stewart's user avatar
  • 5,969
3 votes
Accepted

Brute force password cracking speed - Winrar

The algorithm used by WinRAR to hash the password that protects the encryption key - PBKDF2-HMAC-SHA256: 6. Changes in RAR 5.0 encryption algorithm: a) encryption algorithm is changed from AES-128 ...
Royce Williams's user avatar
3 votes
Accepted

fail2ban permanent ban: resource considerations / limits?

Is this setup going to lead to storage problems eventually? Even if I addresses are stored as text, one won't need more than 15 bytes to store (4 * 3 numbers + 3 dots). That means 1 million addresses ...
Máté Juhász's user avatar
3 votes
Accepted

Is a Bitlocker encrypted drive safe to dispose?

You are disposing of a drive and want to ensure the data is not leaked. If the data was stored in plain-text (i.e. not encrypted), you would have to ensure the data was 'shredded'. Just formatting ...
ChrisInEdmonton's user avatar
2 votes

Unsure if I have understood Hydra syntax correctly?

I guess syntax description is correct for http service only :) Change your command line into this, and will do the trick. I have tested on 8.1 version hydra -L usernames.txt -P passwords.txt site....
Svenv's user avatar
  • 121
2 votes

Is a Bitlocker encrypted drive safe to dispose?

Chris gave a nicely comprehensive answer. His advice—particularly on encrypting, securely deleting and if necessary destroying—is sound. As others have mentioned the question depends on your expected ...
dirac's user avatar
  • 56
2 votes
Accepted

How to crack my MacBook’s password?

Unless you have your Firevault key or you connected it to an Apple ID, you're in trouble. If one of those is true, you can use the official Apple support page which I linked below. Also, if you're ...
aklingam's user avatar
  • 150
2 votes
Accepted

Hydra brute force error

About your question: When using hydra, it's not required to put http:// before the host that you're going to attack. To specify the port, please use the -s flag. You need to specify the -l flag ...
galoget's user avatar
  • 393
2 votes

How can I recover my password for TrueCrypt Rescue Disk?

I believe that the best solution is indeed to use hashcat. A straight brute-force attack cannot succeed if the password was lengthy. But since you know some words that were in the password, this could ...
harrymc's user avatar
  • 478k
1 vote

Can someone help me unlock my MacBook?

NB: These instructions assume you do not have a firmware password or Full Disk Encryption (was that even a thing back in Snow Leopard?) set, and that the only problem is you don't remember the ...
Spiff's user avatar
  • 104k
1 vote

Is it possibly to queue dictionaries or lists in hashcat?

You can use a simple for loop for that. This example will loop thru all .txt files in the current working directory and pass the name to hashcat as a variable: for file in *.txt; do hashcat -m 14600 -...
mashuptwice's user avatar
  • 3,234
1 vote

How to Optimize a Dictionary / Word List?

Using some tools like grep, sed, awk, & sort you can implement some answers from this other site. They include (if you wanted b then d then everything else normally): Pull out lines in the order ...
Xen2050's user avatar
  • 14k
1 vote

Restrictions when using diskutil coreStorage unlockVolume

Turns out that you must run diskutil as sudo if you want to attempt unlocking a volume more than 100 times.
Evan Wieland's user avatar
1 vote
Accepted

Using Medusa on Linux

What does it actually brute force? It brute forces logins: Medusa is in cracking login credential of various protocols to make unauthorized access to a system remotely. ... Thread-based ...
DavidPostill's user avatar
  • 156k
1 vote
Accepted

fail2ban 404 bruteforcing sharex

For details see the article How to setup Fail2ban to detect Apache 404 attacks? To summarize: 1. Create fail2ban filter Create the file /etc/fail2ban/filter.d/apache-404.conf containing: failregex ...
harrymc's user avatar
  • 478k
1 vote
Accepted

Creating a brute force "profile" based on past passwords

I've done something similar after mis-typing a password. I used exrex to generate a list from the possible substitutions, by a regex. You might run something like this to generate all possible ...
silico-biomancer's user avatar
1 vote

linux kde full disk encryption how to bruteforce

I don't know what KDE has to do with full disk encryption, but I believe hashcat would be able to do what you need. It supports LUKS (and Veracrypt/Truecrypt). But this is not for a beginner, at all. ...
Nick's user avatar
  • 678
1 vote

Is a Bitlocker encrypted drive safe to dispose?

Just for completeness, depending on data destruction you can refer to NIST Special Publication 800-88 Guidelines for Media Sanitation - starting on page 26 is Appendix A - Minimum Sanitation ...
Raystafarian's user avatar
  • 21.7k
1 vote

How to find password on a router (cabled) without a hard reset? brute-force only option?

I know this is a very old question, but the admin password for the H640GW is "vertex25". Just incase someone is still looking for this. Cheers! Jaspal
Jaspal's user avatar
  • 19
1 vote

Cracking WPA2 using Intel HD Graphics GPU

For future searchers: As of hashcat version 3.00, CPU and GPU hashcat were merged into a single project, using OpenCL to abstract the platforms. If you install the Intel OpenCL runtime for GPUs, you ...
Royce Williams's user avatar
1 vote
Accepted

How can I estimate the time it takes a certain computer to guess a password?

The answer to "Can I estimate the time an attacker with specific known hardware will take to guess a password with a known hashing algorithm?" is "you can't". This is because the hardware merely ...
Anti-weakpasswords's user avatar
1 vote

How can I estimate the time it takes a certain computer to guess a password?

You should try at https://security.stackexchange.com/, they will probably be more sutable to help you. But as far as i can see it its number of combintations/calculations + per second if the ...
Marifarm IT's user avatar
1 vote

How do you crack a ssh password on mac terminal

As @fixer1234 implied, it could be possible depending on the settings of SSH, how weak the password is and how vigilant the intended victim is, but its not likely. There are a large number of ways of ...
davidgo's user avatar
  • 70.5k

Only top scored, non community-wiki answers of a minimum length are eligible