hacking: security in practice
Can I find the salt used in a database to store password hashes?

I have one password of the list. I am assuming they're MD5 because of their length. What tool would work best to decrypt at that point? Noob here, sorry.

I am assuming a rainbow table of md5 hashes would work. I don't know how hashcat and other tools really work or if there's another way to go about it.

Then there's the problem of finding the salt and how to use it with the program. I have one password so I am hoping that's enough to figure it out, but I simply don't know how!

I would appreciate any advice.

submitted by /u/greyok_
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
The Definition of a Hacker

https://cdn-images-1.medium.com/max/2600/1*xfggcSILokwxih0NGgCpjQ.jpeg
Hackers Defined

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How to Remember a Lot of Passwords?

https://cdn-images-1.medium.com/max/1280/1*j3c83JG8mrCd6yHqFcTIoA.jpeg
One of the biggest headaches for people today is remembering numerous passwords for the various internet services and websites they use.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Fuzzing Web Applications using FFuf

https://cdn-images-1.medium.com/max/2330/1*KeS32ObQtM4jT7we16tCZQ.png
FFuf is a fast web fuzzer written in Go. In, this article we will learn how to use FFuf to enumerate directories and break authentication…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Fuzzing Web Applications using FFuf

FFuf is a fast web fuzzer written in Go. In, this article we will learn how to use FFuf to enumerate directories and break authentication…Continue reading on Medium »
Read more...

RDPHijack-BOF - Cobalt Strike Beacon Object File (BOF) That Uses WinStationConnect API To Perform Local/Remote RDP Session Hijacking
http://www.kitploit.com/2022/11/rdphijack-bof-cobalt-strike-beacon.html

___________________________
@hacking_Attack
@Hacking_Video

Cobalt Strike Beacon (https://www.kitploit.com/search/label/Beacon) Object File (BOF) that uses WinStationConnect API to perform local/remote RDP session hijacking. With a valid access token (https://www.kitploit.com/search/label/Access%20Token) / kerberos (https://www.kitploit.com/search/label/Kerberos) ticket (e.g., golden ticket) of the session owner, you will be able to hijack the session remotely without dropping any beacon/tool on the target server. To enumerate sessions locally/remotely, you could use Quser-BOF (https://github.com/netero1010/Quser-BOF).
Usage Usage: bof-rdphijack [your console (https://www.kitploit.com/search/label/Console) session id] [target session id to hijack] [password|server] [argument]

Command Description
-------- -----------
password Specifies the password of the user who owns the session to which you want to connect.
server Specifies the remote server that you want to perform RDP hijacking.

Sample usage
--------
Redirect session 2 to session 1 (require SYSTEM privilege):
bof-rdphijack 1 2

Redirect session 2 to session 1 with password of the user who owns the session 2 (require high integrity beacon):
bof-rdphijack 1 2 password P@ssw0rd123

Redirect session 2 to session 1 for a remote server (require token/ticket of the user who owns the session 2):
bof-rdphijack 1 2 server SQL01.lab.internal
Compile make Reference tscon.exe

Download RDPHijack-BOF (https://github.com/netero1010/RDPHijack-BOF)

___________________________
@hacking_Attack
@Hacking_Video

Fuzzing Web Applications using FFuf
https://manishmshiva.medium.com/fuzzing-web-applications-using-ffuf-c4ad74190b72?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

FFuf is a fast web fuzzer written in Go. In, this article we will learn how to use FFuf to enumerate directories and break authentication…Continue reading on Medium » (https://manishmshiva.medium.com/fuzzing-web-applications-using-ffuf-c4ad74190b72?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
RDPHijack-BOF - Cobalt Strike Beacon Object File (BOF) That Uses WinStationConnect API To Perform Local/Remote RDP Session Hijacking

https://blogger.googleusercontent.com/img/a/AVvXsEj28hU7xXMIOOGZpUfots778gynsHRRGlYs-hcc7TJSNeAiKiGdRzzh0CikTB5M16M96NpTdZKoeUdZz_SnXU0Vrl39YjWlxPbXtkuJy-M9Pq_PRiR-zPt_0809d0MXSKI11iQa-PrwYsi41wPOTzVPiU4rNBGs9zRC6sDCD7y2HPOUlJb2sd0d5EJhYQ=w640-h378
Cobalt Strike Beacon Object File (BOF) that uses WinStationConnect API to perform local/remote RDP session hijacking. With a valid access token / kerberos ticket (e.g., golden ticket) of the session owner, you will be able to hijack the session remotely without dropping any beacon/tool on the target server.

To enumerate sessions locally/remotely, you could use Quser-BOF.




Usage

Usage: bof-rdphijack [your console session id] [target session id to hijack] [password|server] [argument]

Command Description
-------- -----------
password Specifies the password of the user who owns the session to which you want to connect.
server Specifies the remote server that you want to perform RDP hijacking.

Sample usage
--------
Redirect session 2 to session 1 (require SYSTEM privilege):
bof-rdphijack 1 2

Redirect session 2 to session 1 with password of the user who owns the session 2 (require high integrity beacon):
bof-rdphijack 1 2 password P@ssw0rd123

Redirect session 2 to session 1 for a remote server (require token/ticket of the user who owns the session 2):
bof-rdphijack 1 2 server SQL01.lab.internal


Compile

make

Reference

tscon.exe
Download RDPHijack-BOF

___________________________
@hacking_Attack
@Hacking_Video

Black Hat Ethical Hacking

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
WordPress Blog2Social 6.9.11 Missing Authorization

___________________________
@hacking_Attack
@Hacking_Video

SynFutures Launches V2 Mainnet Bug Bounty
https://medium.com/synfutures/synfutures-launches-v2-mainnet-bug-bounty-dd1560fc7a55?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video