Explains what is Passwor Cracking, what are its basic building blocks, what is the process underlying it

1. :- ಕನ್ನಡ ಎ ಲ್ಸ್ ್ಲೕಯ್ ಲ್ಸ್ ವಿಶೇಷ
ಪಾಸ್ವ ರ್ಡ್ ಕಾ್ರಾ್ರ್ಯಾ ಂಗ್ / Password Cracking

2. ➢ What is Hashes / ಹಾ್ಯಾಷೆಸ್ ಅಂದರೇನು .?
➢ Password Comparison / ಪಾಸ್ವ ರ್ಡ್ ಕೆಲಸ ಮಾಡುವುದು ಹೇಗೆ .?
➢ Types of Password Cracking / ಪಾಸ್ವ ರ್ಡ್ ಕಾ್ರಾ್ರ್ಯಾ ಕ್ಕಿಂಗ್ನ ವಿಧಗಳು
➢ Why Wordlists is required / ವಡರ್ಡ್ಲಿಸ್ಕ್ಟಿಸ್ಟ್ಸ್ ಏಕೆ ಬೇಕು .?
➢ Windows / ವಿಂಡೋಸ್ Password Cracking
➢ Unix / ಯುನಿ ಲ್ಸ್ Password Cracking
➢ Online / ಆನೆ್ಲೖನ್ Password Cracking

3. What is Hashes / ಹಾ್ಯಾಷೆಸ್ ಅಂದರೇನು .?
A algorithm used to generate a unique value for unique input
➢ Hashes are One Way algorithm
➢ For every unique file/text a unique value is generated no
matter what ever computer, location is to used to generate
the hash.
Plain text Input Hash Value

4. Password Comparison /
ಪಾಸ್ವ ರ್ಡ್ ಕೆಲಸ ಮಾಡುವುದು ಹೇಗೆ .?

5. Types of Password Cracking
ಪಾಸ್ವ ರ್ಡ್ ಕಾ್ರಾ್ರ್ಯಾ ಕ್ಕಿಂಗ್ನ ವಿಧಗಳು
❏ Offline Password Cracking
System Passwords ex : Windows, Unix
❏ Online Password Cracking
Network Services ex: https, ssh, ftp, telnet, rdp etc

6. Online Password Cracking

7. Why Wordlists is required / ವಡರ್ಡ್ಲಿಸ್ಕ್ಟಿಸ್ಟ್ಸ್ ಏಕೆ ಬೇಕು .?
Password Cracking Methodology

8. Password Hash stored in Local storage: DAD1D5E9D1694D65DF584D40A783D311
List of Possible password(Assumption) = Wordlists
Plain text Hashes of wordlist Hash from SAM file Is Equal.?
admin 209C6174DA490CAEB422F3FA5A7AE634 DAD1D5E9D1694D65DF584D40A783D311False
bkob BE164992D3641283E62BEB7BAA419ED3 DAD1D5E9D1694D65DF584D40A783D311False
windows7 DAD1D5E9D1694D65DF584D40A783D311DAD1D5E9D1694D65DF584D40A783D311True
kannada C861074A0E0EC79988E9679E8D239D12 DAD1D5E9D1694D65DF584D40A783D311False
exploits 832FFAF6C4FB517B87495F554F072C47 DAD1D5E9D1694D65DF584D40A783D311False
Password Cracking Methodology

9. Windows:
1. Dump Password hashes onto a file using tool Ex:pwdump
2. Copy the hashes to your attacker machine
3. Crack it the respective hash cracker / password cracker tool.
Unix:
1. Copy both Passwd and Shadow file
2. Combine both passwd and shadow in the correct order
3. Run a password cracker with suitable method to crack the password.
Password Cracking Methodology

10. Complexity while performing Password Cracking
ಪಾಸ್ವ ರ್ಡ್ ಕಾ್ರಾ್ರ್ಯಾ ಂಗ್ ಮಾಡುವಾಗ ಬರುವ ಅಡಚಣೆಗಳು
File Containing the Password Hashes:
Windows: C:windowssystem32configSAM
1.It can only be accessed by Administrator access
2.You cannot directly access the file, need to use any tool to get the hashes
ex: pwdump
Unix: /etc/shadow
1.It can only accessed by root / sudo access

11. ಪಾಸ್ವ ರ್ಡ್ ಕಾ್ರಾಸಿ ಂಗ್ ಏಕೆ ಮಾಡಬೇಕು
Why Password Cracking
❖ Cracking found Hashes for Privilege Escalation
❖ Creating a backdoor Access on Previously Hacked Machine
❖ Cracking hashes found on databases
❖ Got one Administrator Access on Target Computer
Note : Probability of any password cracking depends on the
wordlists

12. ಪಾ್ರಾ ೕಗಿಕ/ ಪಾ್ರಾ ಕ್ಟಿಕ ಲ್ಸ್
Windows / ವಿಂಡೋಸ್ Password Cracking

13. Password Comparison /
ಪಾಸ್ವ ರ್ಡ್ ಕೆಲಸ ಮಾಡುವುದು ಹೇಗೆ .?

14. ಪಾ್ರಾ ೕಗಿಕ/ ಪಾ್ರಾ ಕ್ಟಿಕ ಲ್ಸ್
Unix / ಯುನಿ ಲ್ಸ್ Password Cracking

15. Online / ಆನೆ್ಲೖನ್ Password Cracking
Sl No. Cracked = Positive Not Cracked = Negative
1 Response Code = 302/301 Response Code = 200
2 Response Code = 200 Response Code = 302/301
3 Response length is Different Response length is Same
4 Response Code = 302/301 &
Destination = Profile, Home Page
Response Code = 302/301 &
Destination = Same as login page

16. ಪಾ್ರಾ ೕಗಿಕ/ ಪಾ್ರಾ ಕ್ಟಿಕ ಲ್ಸ್
Online / ಆನೆ್ಲೖನ್ Password Cracking