Brute Force Password Cracking with Hashcat

แชร์
ฝัง

ความคิดเห็น • 48

  • @MrPlaythroughhd
    @MrPlaythroughhd 6 ปีที่แล้ว +27

    More of these type of videos please.

  • @geticz5636
    @geticz5636 5 ปีที่แล้ว +10

    Why is it that the best tutorials always have the microphone 1 centimeter away from the mouth...

  • @learningbird9940
    @learningbird9940 6 ปีที่แล้ว +28

    Even if you tell someone to use "password"as their password people will complain that is too long and complicated to remember...

    • @learningbird9940
      @learningbird9940 6 ปีที่แล้ว +6

      And if you tell them to use "p4s5w0rd"...get ready for a tribal war or being excommunicated...

    • @samf8756
      @samf8756 4 ปีที่แล้ว

      @@learningbird9940 shut up

    • @learningbird9940
      @learningbird9940 4 ปีที่แล้ว +1

      @@samf8756 Isn't it true?

    • @samf8756
      @samf8756 4 ปีที่แล้ว

      @@learningbird9940 yeah bro 100%... I forgot I had written that, my bad I was just being an idiot/asshole for no reason lol

    • @samf8756
      @samf8756 4 ปีที่แล้ว

      @@learningbird9940 I was using this tutorial for the NCL cybersecurity tournament gym last night and couldn't get hashcat to work so I was annoyed, but then I figured it out and I got 99.3% of the questions right in the password cracking section. The one I got wrong wasn't hashcat anyway it was for some ophcrack could not decipher one of the hashes.

  • @SeifEddineB
    @SeifEddineB 2 ปีที่แล้ว +3

    Brilliant video, specially when talking about the logic behind current passwords

  • @DaggerSecurity
    @DaggerSecurity 3 ปีที่แล้ว +1

    Can anyone help? I am getting a "Separator unmatched" error message when hashcat tries to read my hash file. I've tried the forums but no success. The hash of a very very old MS Word document password. Note that John can read the same file just fine.

  • @kithano
    @kithano 3 ปีที่แล้ว +1

    Routers in my country (and most countries as I know) come with a default password randomizing upper and lower case letters and digits (no symbols). I red in the manual that there is one that combines numbers and lower case letters(?h), and another that comines numbers and upper case letters (?H) but isn't there one that combines the three?

  • @zilhack3907
    @zilhack3907 3 ปีที่แล้ว +1

    I'm only french ?

  • @rickymelendez1913
    @rickymelendez1913 4 ปีที่แล้ว +3

    Ok i have a password lenght of 12 having uppercase lowercase and digits what string should i use for hashcat ??

    • @lxhacks2005
      @lxhacks2005 4 ปีที่แล้ว

      @@jameshensman8635 how

    • @alicomando1195
      @alicomando1195 3 ปีที่แล้ว

      @@jameshensman8635 hello
      is brute force attack faster than dictionary or wordlist attack ?

    • @charlesvigil4177
      @charlesvigil4177 3 ปีที่แล้ว

      @@alicomando1195 no

  • @ritual301
    @ritual301 6 ปีที่แล้ว +3

    Not gonna lie; whenever you do these sorts of vids, I usually don't understand any of it. I mean, other than, it pays to have a solid password, lol. I do appreciate these vids, though. Never hurts to try and learn something above one's breadth of knowledge:) Thanks!

    • @mewtwo6809
      @mewtwo6809 6 ปีที่แล้ว

      he basically reads the "help" comand for the linux console program called "hashcat" and explains the syntax of the comands you have to enter for any given scenarios of passwords when using the bruteforce methode. ofc you dont understand it if you dont have a clue what a bruteforce attack is (but it is explained) and what a console is (you know a box you type in commands for programs). Intrestingly given a good reward even 10 year olds can learn und understand linux give them a code for free vbucks in a .rar-file and they will be able to open it xD

    • @ritual301
      @ritual301 6 ปีที่แล้ว

      @Mew Two You know Capt Neckbeard, too? Haha, that dude is great

  • @bjtaudio
    @bjtaudio ปีที่แล้ว +1

    It will not work on my passwords as it just random rubbish try this rubbish:- K=j6m,mG1!GZio`!gcs_+9(gHVdwLkZ-EMXL-7863d-lio how many years u recon? hashkat is good tool for testing password strength. Oh by the time u get it. Its been changed again...bugger! type in along string of random rubbish...see what goes pop first GPU or your frustration in waiting and waiting.

  • @ozzysideika7840
    @ozzysideika7840 5 ปีที่แล้ว +4

    Fantastic video, thank you!

    • @alicomando1195
      @alicomando1195 3 ปีที่แล้ว

      hello
      is brute force attack faster than dictionary or wordlist attack ?

    • @dragonfiber1038
      @dragonfiber1038 2 ปีที่แล้ว

      @@alicomando1195 depends on the length of your dictionary, and the password

  • @SuperMikkeli
    @SuperMikkeli 6 ปีที่แล้ว +1

    Could you make a video about cracking forgotten LUKS pass with hashcat?

  • @NealD
    @NealD 6 ปีที่แล้ว +4

    Pretty easy to tell users how to go longer... take the 12 len password they plan to use... and REPEAT IT. Giving you a 24 char password. To make it more fun, tell them to use it, put a space and use it again. Even “Password123 Password123” becomes quite unlikely to be cracked. Same with “Password Password Password1”.

    • @lmaoroflcopter
      @lmaoroflcopter 5 ปีที่แล้ว

      Combinator3.py will deal with that and if it's a public dump, everyone will be trying everything against it. Expect your five-peated password to be quite high up the priority list for trying. People are creatures of habit and length by repetition is going to be obviously included in any password dump.
      So no. Your recommendation is a terrible one.

  • @lucasmenno
    @lucasmenno 6 ปีที่แล้ว

    Why did you do it just now? Just a month ago I was doing this thing to my wireless and searched anything myself. 😂
    But I also took some interesting thinks from your video. Thanks for that 👍

  • @Ghost-ld5fn
    @Ghost-ld5fn ปีที่แล้ว

    legend

  • @caseylgoodrich
    @caseylgoodrich 5 ปีที่แล้ว

    How to you find out the password per second for your rig?

  • @mind_over_matterz
    @mind_over_matterz 4 ปีที่แล้ว +2

    I've been trying brute force cracking since I had a 486 and never got it... Lol this is a myth...

    • @killabite620
      @killabite620 4 ปีที่แล้ว +1

      You’re joking right?

    • @alicomando1195
      @alicomando1195 3 ปีที่แล้ว

      hello
      is brute force attack faster than dictionary or wordlist attack ?

    • @killabite620
      @killabite620 3 ปีที่แล้ว

      @@alicomando1195 in theory a dictionary attack would be faster because it wouldn’t try every single combination of passwords.

  • @crazedtuber3396
    @crazedtuber3396 4 ปีที่แล้ว

    dude i don't understand a thing from these videos how can i hack one's gmail account??

    • @Niko-ku2cr
      @Niko-ku2cr 4 ปีที่แล้ว

      lol, how old are you?

    • @crazedtuber3396
      @crazedtuber3396 4 ปีที่แล้ว

      N1ko 0 Lol, 24. What’s so odd that you ask my age? Lol. I need it because i bought an uplay account to play ac odyssey and it got locked down since i was playing from geforce now and uplay found it as a threat and now i cant reach the gmail acc to change pass.

    • @onemore7108
      @onemore7108 4 ปีที่แล้ว

      @@crazedtuber3396 u can only hack someone's gmail if u have key logger on his pc, or u can use social engineering by sending him a link of a website that looks exactly the same as gmail login site so he can login the credentials. If a hacker has ur account, its hopeless

  • @alicomando1195
    @alicomando1195 3 ปีที่แล้ว +1

    hello
    is brute force attack faster than dictionary or wordlist attack ?

    • @quidsup
      @quidsup  3 ปีที่แล้ว +1

      Dictionary attack is usually much quicker. Brute force is what you do when everything else has failed to crack the passwords

  • @tomohiroluo3007
    @tomohiroluo3007 2 ปีที่แล้ว +1

    This actually gives me a lot of ideas using hashcat