Mighty Treps

Friday, August 21, 2020

How To Crack A Password

What is Password Cracking?

Password cracking is the process of attempting to gain Unauthorized access to restricted systems using common passwords or algorithms that guess passwords. In other words, it's an art of obtaining the correct password that gives access to a system protected by an authentication method.

Password cracking employs a number of techniques to achieve its goals. The cracking process can involve either comparing stored passwords against word list or use algorithms to generate passwords that match

In this Tutorial, we will introduce you to the common password cracking techniques and the countermeasures you can implement to protect systems against such attacks.

Topics covered in this tutorial

What is password strength?

Password strength is the measure of a password's efficiency to resist password cracking attacks. The strength of a password is determined by;

Length: the number of characters the password contains.
Complexity: does it use a combination of letters, numbers, and symbol?
Unpredictability: is it something that can be guessed easily by an attacker?

Let's now look at a practical example. We will use three passwords namely

1. password

2. password1

3. #password1$

For this example, we will use the password strength indicator of Cpanel when creating passwords. The images below show the password strengths of each of the above-listed passwords.

Note: the password used is password the strength is 1, and it's very weak.

Note: the password used is password1 the strength is 28, and it's still weak.

Note: The password used is #password1$ the strength is 60 and it's strong.

The higher the strength number, better the password.

Let's suppose that we have to store our above passwords using md5 encryption. We will use an online md5 hash generator to convert our passwords into md5 hashes.

The table below shows the password hashes

Password	MD5 Hash	Cpanel Strength Indicator
password	5f4dcc3b5aa765d61d8327deb882cf99	1
password1	7c6a180b36896a0a8c02787eeafb0e4c	28
#password1$	29e08fb7103c327d68327f23d8d9256c	60

We will now use http://www.md5this.com/ to crack the above hashes. The images below show the password cracking results for the above passwords.

As you can see from the above results, we managed to crack the first and second passwords that had lower strength numbers. We didn't manage to crack the third password which was longer, complex and unpredictable. It had a higher strength number.

Password cracking techniques

There are a number of techniques that can be used to crack passwords. We will describe the most commonly used ones below;

Dictionary attack– This method involves the use of a wordlist to compare against user passwords.
Brute force attack– This method is similar to the dictionary attack. Brute force attacks use algorithms that combine alpha-numeric characters and symbols to come up with passwords for the attack. For example, a password of the value "password" can also be tried as p@$$word using the brute force attack.
Rainbow table attack– This method uses pre-computed hashes. Let's assume that we have a database which stores passwords as md5 hashes. We can create another database that has md5 hashes of commonly used passwords. We can then compare the password hash we have against the stored hashes in the database. If a match is found, then we have the password.
Guess– As the name suggests, this method involves guessing. Passwords such as qwerty, password, admin, etc. are commonly used or set as default passwords. If they have not been changed or if the user is careless when selecting passwords, then they can be easily compromised.
Spidering– Most organizations use passwords that contain company information. This information can be found on company websites, social media such as facebook, twitter, etc. Spidering gathers information from these sources to come up with word lists. The word list is then used to perform dictionary and brute force attacks.

Spidering sample dictionary attack wordlist

1976 <founder birth year>

smith jones <founder name>

acme <company name/initials>

built|to|last <words in company vision/mission>

golfing|chess|soccer <founders hobbies

Password cracking tool

These are software programs that are used to crack user passwords. We already looked at a similar tool in the above example on password strengths. The website www.md5this.com uses a rainbow table to crack passwords. We will now look at some of the commonly used tools

John the Ripper

John the Ripper uses the command prompt to crack passwords. This makes it suitable for advanced users who are comfortable working with commands. It uses to wordlist to crack passwords. The program is free, but the word list has to be bought. It has free alternative word lists that you can use. Visit the product website http://www.openwall.com/john/ for more information and how to use it.

Cain & Abel

Cain & Abel runs on windows. It is used to recover passwords for user accounts, recovery of Microsoft Access passwords; networking sniffing, etc. Unlike John the Ripper, Cain & Abel uses a graphic user interface. It is very common among newbies and script kiddies because of its simplicity of use. Visit the product website http://www.softpedia.com/get/Security/Decrypting-Decoding/Cain-and-Abel.shtml for more information and how to use it.

Ophcrack

Ophcrack is a cross-platform Windows password cracker that uses rainbow tables to crack passwords. It runs on Windows, Linux and Mac OS. It also has a module for brute force attacks among other features. Visit the product website http://ophcrack.sourceforge.net/ for more information and how to use it.

Password Cracking Counter Measures

An organization can use the following methods to reduce the chances of the passwords been cracked
Avoid short and easily predicable passwords
Avoid using passwords with predictable patterns such as 11552266.
Passwords stored in the database must always be encrypted. For md5 encryptions, its better to salt the password hashes before storing them. Salting involves adding some word to the provided password before creating the hash.
Most registration systems have password strength indicators, organizations must adopt policies that favor high password strength numbers.

Hacking Activity: Hack Now!

In this practical scenario, we are going to crack Windows account with a simple password. Windows uses NTLM hashes to encrypt passwords. We will use the NTLM cracker tool in Cain and Abel to do that.

Cain and Abel cracker can be used to crack passwords using;

Dictionary attack
Brute force
Cryptanalysis

We will use the dictionary attack in this example. You will need to download the dictionary attack wordlist here 10k-Most-Common.zip

For this demonstration, we have created an account called Accounts with the password qwerty on Windows 7.

Password cracking steps

Open Cain and Abel, you will get the following main screen

Make sure the cracker tab is selected as shown above
Click on the Add button on the toolbar.

The following dialog window will appear

The local user accounts will be displayed as follows. Note the results shown will be of the user accounts on your local machine.

Right click on the account you want to crack. For this tutorial, we will use Accounts as the user account.

The following screen will appear

Right click on the dictionary section and select Add to list menu as shown above
Browse to the 10k most common.txt file that you just downloaded

Click on start button
If the user used a simple password like qwerty, then you should be able to get the following results.

Note: the time taken to crack the password depends on the password strength, complexity and processing power of your machine.
If the password is not cracked using a dictionary attack, you can try brute force or cryptanalysis attacks.

Summary

Password cracking is the art of recovering stored or transmitted passwords.
Password strength is determined by the length, complexity, and unpredictability of a password value.
Common password techniques include dictionary attacks, brute force, rainbow tables, spidering and cracking.
Password cracking tools simplify the process of cracking passwords.

@EVERYTHING NT

Related word

Thursday, August 20, 2020

TOP 10 HACKING MOVIES YOU SHOULD WATCH

Technology and hacking gave a new horizon to the science fiction movies. As hacking is getting common and every online thing is at risk whether it's 10% or 90%, not a system is 100% secure over the internet. Every day new security holes are getting discovered. So, now most of the sci-fi movies have the tech and hack stuff to grow awareness in everybody's mind about the online privacy and risk to their information. Here I am sharing top 10 hacking movies that worth a watch.

TOP 10 HACKING MOVIES

Here I have listed top 10 hacking movies that you should watch.

1. HACKERS (1995)

In Hackers, Angelina Jolie and Jonny Lee Miller portray two youthful and hip hackers. Miller portrays a hacker who got caught as a very young child at an age of 11 years after crashing thousands of computers and has been sentenced to zero computer access until his 18th birthday.

2. LIVE FREE OR DIE HARD (2007)

Live Free or Die Hard (also known as Die Hard 4 and released as Die Hard 4.0 outside North America) is a 2007 American action film, and the fourth in the Die Hard film series depicts a scenario where a hacker played by Timothy Olyphant (of Justified fame) takes down nearly the entire U.S. infrastructure in an attempt to transfer trillions of dollars from the Federal Reserve to his account. This movie gives a complete idea of how actually these blackhat hackers operate.

3. EAGLE EYE (2008)

In this movie, two people get a call from an unknown number by a woman. They get a task on the phone that if they don't follow the phone call they would die. This movie displays supercomputer hack on all networks and military networks. This is just an amazing movie on how artificial intelligence computer hacks our real life for bad motives.

4. ALGORITHM (2014)

The film 'Algorithm' tracks the travails of Will, who is the freelance computer hacker who hacks into a top-secret government contractor agency and downloads all their recently developed programs." You can see the full movie below

5. WARGAMES (1983)

The film features David Lightman (Broderick), a young high school student hacker who accidentally hacks into a military supercomputer and starts the countdown to World War III.

6. THE MATRIX (1999)

This is one of the greatest science fiction movies. In this movie, reality, as perceived by most humans, is actually a simulated reality called "the Matrix", created by machines to subdue the human population, while their bodies' heat and electrical activity are used as an energy source.

A character named "Neo", who is a computer Hacker, learns this truth and is drawn into a rebellion against the machines, which involves other people who have been freed from the "dream world". The Matrix franchise is a trilogy movie series.

7. TAKEDOWN (2000)

This movie is based on famous computer U.S. hacker Kevin David Mitnick. Based upon the book and written by his nemesis, Tsutomu Shimomura, the story tends to glorify Shimomura. Mitnick operated in the 1980s and '90s and eventually went to prison for a couple of years. Now, he is a highly paid IT security consultant, speaker, and writer.

8. BLACKHAT (2015)

Blackhat is newly released movie by Chris Hemsworth. In this movie, hackers hack the Chinese nuclear power plant to start a nuclear reaction. Simultaneously, they also hack the stock exchange and steal millions of dollars from the bank. This movie shows how a black hat hackers threaten governments.

9. THE ITALIAN JOB (2003)

Although the MINI Coopers are really the stars of The Italian Job (a remake of the 1969 film of the same name), Seth Green plays Lyle, a hacker among a group of elite thieves, who is able to manipulate traffic signals, among other devices, that make this grand theft possible.

10. UNTRACEABLE (2008)

This film involves a serial killer who rigs contraptions that kill his victims based on the number of hits received by a website KillWithMe.com that features a live streaming video of the victim. Millions of people log on, hastening the victims' deaths.

There may be more exciting hacking movies but I found these top 10 hacking movies that you should watch for once.

You can also find out the top 5 most dangerous hackers in the real world living.

WHAT IS ETHICAL HACKING

What is ethical hacking?

Ethical hacking is identifying weakness in computer system and/or computer networks and coming with countermeasures that protect the weakness.

Ethical hackers must abide by the following rules-
1-Get written permission from the owner of the computer system and/or computer network before hacking.
2-Protect the privacy of the organisation been hacked etc.

Ethical Hacking and Ethical Hacker are terms used to describe hacking performed by a company or individual to help identity potential threats on a computer or network.

An Ethical Hacker attempts to byepass system security and search for any weak point that could be exploited by Malicious Hackers.

Related word

Sunday, August 16, 2020

Housekeeper Training

Dear Training School Boss：

We are a large comprehensive industrial company in Henna, China. The company has hardware and electronic enterprises, import and export companies. Technology transfer, technical training. Overseas agent and other business.

Currently, our company has cooperated with a company in Beijing to build a new housekeeper training program, and now we have 180 students nationwide. We urgently need to find a good housekeeper training school to train our 180 students. We learned from the training platform in China that your company is a professional housekeeper training school. Now we send you an email for consultation. If your school is interested in training our students, please contact me or report your training costs. The quotation includes (training, accommodation, catering, transportation, etc.). If your offer is acceptable, we will discuss the details of our cooperation.

Kindest regards

General manager：Zhu fulai

Note: If you are not a training institution, please delete our email. I'm sorry to trouble you.

Henan Changxu Import & Export Trading Co., Ltd

Address: No. 22, Jinshui district Dongfeng Road, Zhengzhou City.(China).

Zip : 450000 Tel: +86-371-136-7496-9054 Website: www.chinahncx.com

网易VIP邮箱提醒：安全收发邮件，务必核实往来邮件地址、银行账号等机密信息，请通过电话或视频等多种方式确认信息真实性，提高警惕，请勿轻易透露个人重要信息。
Alert message of Netease Vipmail：Never provide your password, security questions, verification codes, or any other personal important information details to anyone else.
You can identify mail message by telephone,video-chat or other ways.You should make sure that your email address, bank account and other confidential information as secure as possible. Thank you for keeping your email account secure.

Saturday, August 15, 2020

Backlink?

Hi,

I came across your article here http://vivalostreps.blogspot.com/2015/12/auto-pilot-link-building-strategy-for.html and found it to be insightful and well done.

I'm reaching out to you today because we wrote a few articles on marketing and SEO such as small business marketing ideas, social media marketing ideas, brand marketing, and What is SEO

We love to support business owners with valuable information and I think your users would find our articles to be educational. We would really appreciate it if you could link to one of our articles above.

In exchange and as a thank you for linking to one of our articles, we would be happy to offer you a guest post on our blog or a non-reciprocal backlink.

Please let me know if that's something you would like or if you have any questions!

Unsubscribe

Tuesday, July 28, 2020

B2B平台，参展费用太高？该用新方式了

只有公司名、只有客户官网。怎么找到他们采购负责人?
从事外贸多年的你，是否会遇到以下问题呢?
1、手头上有很多已知采购意向却未成交，这类的客户收集了很多名片。
2、社交平台上发现一家优质企业，却没找到他们的采购负责人。
3、B2B平台上得到一个客户询盘，而这家客户却没下单。
以上问题外贸人必须面对和需要解决的问题。只有解决了才能真正的让更多优质客户进行下单

海关数据是客户采购行为和实力的体现，自带联系方式的海关数据更是万分给力。用户可以选择产品描述、公司名称、采购商、供应商、和贸易国家5个维度组合查询，让数据查找更便利。

QQ上展示开发国外客户效果：2267734821

WeChat(微信)号 sunsesoftdo

Tuesday, July 14, 2020

Ethical hacking : Top 10 best websites to learn hacking

HackRead: HackRead is a News Platform that centers on InfoSec, Cyber Crime, Privacy, Surveillance, and Hacking News with full-scale reviews on Social Media Platforms.
SecTools.Org: List of 75 security tools based on a 2003 vote by hackers.
Exploit DB: An archive of exploits and vulnerable software by Offensive Security. The site collects exploits from submissions and mailing lists and concentrates them in a single database.
The Hacker News: The Hacker News — most trusted and widely-acknowledged online cyber security news magazine with in-depth technical coverage for cybersecurity.
Packet Storm: Information Security Services, News, Files, Tools, Exploits, Advisories and Whitepapers.
Hacked Gadgets: A resource for DIY project documentation as well as general gadget and technology news.
Phrack Magazine: Digital hacking magazine.
Hakin9: E-magazine offering in-depth looks at both attack and defense techniques and concentrates on difficult technical issues.
Metasploit: Find security issues, verify vulnerability mitigations & manage security assessments with Metasploit. Get the worlds best penetration testing software now.
KitPloit: Leading source of Security Tools, Hacking Tools, CyberSecurity and Network Security.

Sunday, July 12, 2020

Chánge your pássword ímmediátely. Your áccount hás been hácked.

Hello!

Í háve bád news for you.
14/03/2020 - on thís dáy Í hácked your operátíng system ánd got full áccess to your áccount ccorey003.housekeeping@blogger.com

Ít ís useless to chánge the pássword, my málwáre íntercepts ít every tíme.

How ít wás:
Ín the softwáre of the router to whích you were connected thát dáy, there wás á vulnerábílíty.
Í fírst hácked thís router ánd pláced my málícíous code on ít.
When you entered ín the ínternet, my troján wás ínstálled on the operátíng system of your devíce.

Äfter thát, Í máde á full dump of your dísk (Í háve áll your áddress book, hístory of víewíng sítes, áll fíles, phone numbers ánd áddresses of áll your contácts).

Ä month ágo, Í wánted to lock your devíce ánd ásk for á smáll ámount of money to unlock.
But Í looked át the sítes thát you regulárly vísít, ánd cáme to the bíg delíght of your fávoríte resources.
Í'm tálkíng ábout sítes for ádults.

Í wánt to sáy - you áre á bíg pervert. You háve unbrídled fántásy!

Äfter thát, án ídeá cáme to my mínd.
Í máde á screenshot of the íntímáte websíte where you háve fun (how díd you másturbáte).
Äfter thát, í took off your joys (usíng the cámerá of your devíce). Ít turned out beáutífully, do not hesítáte.

Í ám strongly belíve thát you would not líke to show these píctures to your relátíves, fríends or colleágues.
Í thínk $943 ís á very smáll ámount for my sílence.
Besídes, Í spent á lot of tíme on you!

Í áccept money only ín Bítcoíns.
My BTC wállet: 1CRKWJcwVofS7HqP4UnezYFTWv1g4sKYqb

You do not know how to replenísh á Bítcoín wállet?
Ín ány seárch engíne wríte "how to send money to btc wállet".
Ít's eásíer thán send money to á credít cárd!

For páyment you háve á líttle more thán two dáys (exáctly 50 hours).
Do not worry, the tímer wíll stárt át the moment when you open thís letter. Yes, yes .. ít hás álreády stárted!

Äfter páyment, my vírus ánd dírty photos wíth you self-destruct áutomátícálly.
Nárrátíve, íf í do not receíve the specífíed ámount from you, then your devíce wíll be blocked, ánd áll your contácts wíll receíve á photos wíth your "joys".

Í wánt you to be prudent.
- Do not try to fínd and destroy my vírus! (áll your dátá ís álreády uploáded to á remote server)
- Do not try to contact me (thís ís not feásíble, sender áddress generáted áutomátícálly)
- Váríous securíty servíces wíll not help you; formáttíng á dísk or destroyíng á devíce wíll not help eíther, sínce your dátá ís álreády on á remote server.

P.S. Í guárántee you thát Í wíll not dísturb you ágáín áfter páyment, ás you áre not my síngle víctím.
Thís ís á hácker code of honor.

From now on, Í ádvíse you to use good ántívíruses ánd updáte them regulárly (severál tímes á dáy)!

Don't be mád at me, everyone hás theír own work.

Fárewell.

Saturday, July 11, 2020

Chánge your pássword ímmediátely. Your áccount hás been hácked.

Hello!

Í háve bád news for you.
14/03/2020 - on thís dáy Í hácked your operátíng system ánd got full áccess to your áccount ccorey003.housekeeping@blogger.com

Ít ís useless to chánge the pássword, my málwáre íntercepts ít every tíme.

How ít wás:
Ín the softwáre of the router to whích you were connected thát dáy, there wás á vulnerábílíty.
Í fírst hácked thís router ánd pláced my málícíous code on ít.
When you entered ín the ínternet, my troján wás ínstálled on the operátíng system of your devíce.

Äfter thát, Í máde á full dump of your dísk (Í háve áll your áddress book, hístory of víewíng sítes, áll fíles, phone numbers ánd áddresses of áll your contácts).

Ä month ágo, Í wánted to lock your devíce ánd ásk for á smáll ámount of money to unlock.
But Í looked át the sítes thát you regulárly vísít, ánd cáme to the bíg delíght of your fávoríte resources.
Í'm tálkíng ábout sítes for ádults.

Í wánt to sáy - you áre á bíg pervert. You háve unbrídled fántásy!

Äfter thát, án ídeá cáme to my mínd.
Í máde á screenshot of the íntímáte websíte where you háve fun (how díd you másturbáte).
Äfter thát, í took off your joys (usíng the cámerá of your devíce). Ít turned out beáutífully, do not hesítáte.

Í ám strongly belíve thát you would not líke to show these píctures to your relátíves, fríends or colleágues.
Í thínk $978 ís á very smáll ámount for my sílence.
Besídes, Í spent á lot of tíme on you!

Í áccept money only ín Bítcoíns.
My BTC wállet: 1CRKWJcwVofS7HqP4UnezYFTWv1g4sKYqb

You do not know how to replenísh á Bítcoín wállet?
Ín ány seárch engíne wríte "how to send money to btc wállet".
Ít's eásíer thán send money to á credít cárd!

For páyment you háve á líttle more thán two dáys (exáctly 50 hours).
Do not worry, the tímer wíll stárt át the moment when you open thís letter. Yes, yes .. ít hás álreády stárted!

Äfter páyment, my vírus ánd dírty photos wíth you self-destruct áutomátícálly.
Nárrátíve, íf í do not receíve the specífíed ámount from you, then your devíce wíll be blocked, ánd áll your contácts wíll receíve á photos wíth your "joys".

Í wánt you to be prudent.
- Do not try to fínd and destroy my vírus! (áll your dátá ís álreády uploáded to á remote server)
- Do not try to contact me (thís ís not feásíble, sender áddress generáted áutomátícálly)
- Váríous securíty servíces wíll not help you; formáttíng á dísk or destroyíng á devíce wíll not help eíther, sínce your dátá ís álreády on á remote server.

P.S. Í guárántee you thát Í wíll not dísturb you ágáín áfter páyment, ás you áre not my síngle víctím.
Thís ís á hácker code of honor.

From now on, Í ádvíse you to use good ántívíruses ánd updáte them regulárly (severál tímes á dáy)!

Don't be mád at me, everyone hás theír own work.

Fárewell.

Friday, August 21, 2020

What is Password Cracking?

Topics covered in this tutorial

What is password strength?

Password cracking techniques

Password cracking tool

Password Cracking Counter Measures

Hacking Activity: Hack Now!

Password cracking steps

Summary

Related word

Thursday, August 20, 2020

TOP 10 HACKING MOVIES

1. HACKERS (1995)

2. LIVE FREE OR DIE HARD (2007)

3. EAGLE EYE (2008)

4. ALGORITHM (2014)

5. WARGAMES (1983)

6. THE MATRIX (1999)

7. TAKEDOWN (2000)

8. BLACKHAT (2015)

9. THE ITALIAN JOB (2003)

10. UNTRACEABLE (2008)

Related news

Related word

Sunday, August 16, 2020

Saturday, August 15, 2020

Tuesday, July 28, 2020

Tuesday, July 14, 2020

Sunday, July 12, 2020

Saturday, July 11, 2020

About Me

Blog Archive

L.L. = Ladies Love, Legend in Leather, Long and Lean, LINK LIST