28
votes
Accepted
Automatically 'brute force' a few bytes to recover a corrupt file
Here's a small Python program which does what you seem to be describing.
#!/usr/bin/env python3
from hashlib import sha1
with open('binaryfile', 'rb') as bin:
binary = bin.read()
base = 0x0078
#...
22
votes
Accepted
How to force a connection to a site through Chrome (or any other browser's) "Your connection is not private" screen
There is a way to bypass this error, it's a pretty annoying way but it should work.
Click anywhere in Chrome window where you see the error, and type thisisunsafe (type it out, not Copy/Paste, despite ...
4
votes
Accepted
How do I recover the password to a gmail account with hydra?
Non-answer that is actually the correct answer:
You don't.
This is because brute-force password guessing as a method for account recovery - even for your own account - is against the terms and ...
4
votes
Automatically 'brute force' a few bytes to recover a corrupt file
No, no, no and again NO!
Seldom the answer you get is not what you expect.
Some questions for you:
Is it possible that an expert doesn't know that it is possible to brute force a string of for bytes ...
4
votes
Accepted
Canoga-Perkins Password recovery (Brute-forcing via COM port)
If you are trying this on ubuntu,
"sudo apt-get install minicom". Use your favorite search engine and follow a online guide to get crunch on your specific version of Ubuntu.
I installed Kali ...
3
votes
Accepted
Brute force password cracking speed - Winrar
The algorithm used by WinRAR to hash the password that protects the encryption key - PBKDF2-HMAC-SHA256:
6. Changes in RAR 5.0 encryption algorithm:
a) encryption algorithm is changed from AES-128 ...
3
votes
Accepted
fail2ban permanent ban: resource considerations / limits?
Is this setup going to lead to storage problems eventually?
Even if I addresses are stored as text, one won't need more than 15 bytes to store (4 * 3 numbers + 3 dots).
That means 1 million addresses ...
3
votes
Accepted
Is a Bitlocker encrypted drive safe to dispose?
You are disposing of a drive and want to ensure the data is not leaked.
If the data was stored in plain-text (i.e. not encrypted), you would have to ensure the data was 'shredded'. Just formatting ...
2
votes
Is a Bitlocker encrypted drive safe to dispose?
Chris gave a nicely comprehensive answer. His advice—particularly on encrypting, securely deleting and if necessary destroying—is sound. As others have mentioned the question depends on your expected ...
2
votes
Accepted
Hydra brute force error
About your question:
When using hydra, it's not required to put http:// before the host that you're going to attack.
To specify the port, please use the -s flag.
You need to specify the -l flag ...
2
votes
Accepted
How to crack my MacBook’s password?
Unless you have your Firevault key or you connected it to an Apple ID, you're in trouble. If one of those is true, you can use the official Apple support page which I linked below. Also, if you're ...
2
votes
How can I recover my password for TrueCrypt Rescue Disk?
I believe that the best solution is indeed to use
hashcat.
A straight brute-force attack cannot succeed if the password was lengthy.
But since you know some words that were in the password, this could ...
1
vote
Can someone help me unlock my MacBook?
NB: These instructions assume you do not have a firmware password or Full Disk Encryption (was that even a thing back in Snow Leopard?) set, and that the only problem is you don't remember the ...
1
vote
Is it possibly to queue dictionaries or lists in hashcat?
You can use a simple for loop for that.
This example will loop thru all .txt files in the current working directory and pass the name to hashcat as a variable:
for file in *.txt; do hashcat -m 14600 -...
1
vote
Restrictions when using diskutil coreStorage unlockVolume
Turns out that you must run diskutil as sudo if you want to attempt unlocking a volume more than 100 times.
1
vote
Accepted
Using Medusa on Linux
What does it actually brute force?
It brute forces logins:
Medusa is in cracking login credential of various protocols to make unauthorized access to a system remotely.
...
Thread-based ...
1
vote
Accepted
fail2ban 404 bruteforcing sharex
For details see the article
How to setup Fail2ban to detect Apache 404 attacks?
To summarize:
1. Create fail2ban filter
Create the file /etc/fail2ban/filter.d/apache-404.conf containing:
failregex ...
1
vote
Accepted
Creating a brute force "profile" based on past passwords
I've done something similar after mis-typing a password. I used exrex to generate a list from the possible substitutions, by a regex.
You might run something like this to generate all possible ...
1
vote
linux kde full disk encryption how to bruteforce
I don't know what KDE has to do with full disk encryption, but I believe hashcat would be able to do what you need. It supports LUKS (and Veracrypt/Truecrypt).
But this is not for a beginner, at all.
...
1
vote
How to Optimize a Dictionary / Word List?
Using some tools like grep, sed, awk, & sort you can implement some answers from this other site. They include (if you wanted b then d then everything else normally):
Pull out lines in the order ...
1
vote
Is a Bitlocker encrypted drive safe to dispose?
Just for completeness, depending on data destruction you can refer to NIST Special Publication 800-88 Guidelines for Media Sanitation - starting on page 26 is Appendix A - Minimum Sanitation ...
1
vote
Accepted
How can I estimate the time it takes a certain computer to guess a password?
The answer to "Can I estimate the time an attacker with specific known hardware will take to guess a password with a known hashing algorithm?" is "you can't".
This is because the hardware merely ...
1
vote
How can I estimate the time it takes a certain computer to guess a password?
You should try at https://security.stackexchange.com/, they will probably be more sutable to help you.
But as far as i can see it its number of combintations/calculations + per second
if the ...
1
vote
How do you crack a ssh password on mac terminal
As @fixer1234 implied, it could be possible depending on the settings of SSH, how weak the password is and how vigilant the intended victim is, but its not likely.
There are a large number of ways of ...
1
vote
How to find password on a router (cabled) without a hard reset? brute-force only option?
I know this is a very old question, but the admin password for the H640GW is "vertex25".
Just incase someone is still looking for this.
Cheers!
Jaspal
1
vote
Cracking WPA2 using Intel HD Graphics GPU
For future searchers:
As of hashcat version 3.00, CPU and GPU hashcat were merged into a single project, using OpenCL to abstract the platforms.
If you install the Intel OpenCL runtime for GPUs, you ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
brute-force × 59passwords × 15
security × 14
linux × 10
ssh × 6
password-recovery × 6
networking × 4
encryption × 4
macos × 3
firewall × 3
dictionary × 3
windows × 2
windows-10 × 2
command-line × 2
router × 2
kali-linux × 2
bitlocker × 2
cryptography × 2
fail2ban × 2
wps × 2
hard-drive × 1
wireless-networking × 1
google-chrome × 1
bash × 1
mac × 1