Build your desktop application using Tkinter

By -
Image
Use tkinter to build your first GUI application very quickly.  What you'll learn;   🔰 Build windows applications  🔰 Learn how to use GUI with python  🔰 Learn how to use Tkinter library  🔰 Transform an idea to an app  🔰 Using some sqlite  🔰 Using the pillow library  🔰 Import pictures in an application  🔰 Convert pictures from png to jpg  🔰 Convert picture from jpg to png Link : https://www.udemy.com/course/build-your-first-desktop-application-using-tkinter/?couponCode=FGPTKINTER Enjoy! 
2 comments

How Hackers Grab Encrypted Passwords and Crack Them

By -

One may have asked, "How do hackers take my password, if the website owner can't?" The answer is simple. When a website stores your login password for the site, it is run through a cryptographic hash function before it enters the database. 







So how do hackers get these passwords? 

When a website is breached and has their database stolen, the password hashes will be in there. A hacker will analyze the hashes, and see which hash type they are, and then bruteforce them. Bruteforcing is when you systematically cycle through each letter in a letterset until it matches a password. A letter set can be all lower-case, upper-case, symbols or anything the hacker wants. So the hacker bruteforces until they find a hash that matches yours, resulting in "guessing" your password.









I dedicate this tutorial for anyone who wants to understand password attack vectors and those training for careers in cyber security. 

Lets run through what it takes to hack a password using the common MD5 hashing algorithm. I'm going to show you how to do this on both Windows and Linux.

NB: For Educational Purpose Only! 

Step 1 Cracking MD5 on Windows

On Windows, we're going to need to download and install Cain & Abel. Cain is part of the software suite, and is a AIO (All-In-One) Windows hacking tool. We will be using its bruteforce function to crack MD5 hashes.

Hash a Word

Let's hash the word "cowsay" using Miracle Salad's MD5 hash generator. We get the following as a result:

0f606505ce5a8e34d306f707067786ef

Bruteforce with Cain

Let's see how to crack the hash of the word "cowsay". Follow closely!

See how quick and easy that was? Load the hash, click dictionary attack, and wait. This was on a single core processor in a Virtual Machine, so imagine what it would be like on a powerful computer with GPU's.

Step 2 Cracking MD5 on Linux

On Linux, cracking hashes is a bit different. We will be using JTR (John the Ripper). Linux is a bit faster at cracking hashes. 

Installation

  1. First, download JTR from here.
  2. Extract with tar zxvf john-1.7.8.tar.gz
  3. Navigate to the john directory
  4. Install with ./configure && make && sudo make install

Bruteforce with John

John the Ripper is already installed in kali so I'm going to crack the hash of the word "cowsay" again, but this time with JTR. Commands will be listed below.

Commands

  • nano hash (inject hash into file and save)
















After placing the hashes into the file in the editor press ctrl+X to exit and Y to save file and press enter exit the nano editor. 


  • sudo john --format=raw-md5 hash







As you can see in the image above, John the Ripper (Linux) cracked the password hash within 4 seconds. 



  • sudo john --format=raw-md5 --show hash

Finally as you can see in the screenshot above, John the Ripper (Linux) managed to crack the hash password showing us the password "cowsay".

Step 3 Protect Yourself from Password Cracking

Check on my previous tutorial on How to create strong unbreakable passwords. The same rules apply here. Keep your passwords longer than 12 characters and use symbols. It greatly increases the time it takes to crack.

Comments

  1. Ann28 August 2020 at 21:04

    Nice write-up👌🏾

    ReplyDelete
  2. Sardonyx4 September 2020 at 05:55

    Dope tutorials and a very detailed explanation to how hackers can still our passwords to harm us.. Keep the good thing you started up man!

    ReplyDelete
  3. Joe hallo4 September 2020 at 09:52

    Big ups bro nice piece....

    ReplyDelete

Post a Comment

Popular posts from this blog

What is Required to Become a Master Ethical Hacker

By -
Image
As the hacker is among the most skilled information technology disciplines, it requires a wide knowledge of technologies and techniques. To truly be a proficient hacker, one must master many skills. Don't be discouraged if you don't have all the skills I list here, but rather use this list as a starting ground for what you need to study in the field of cyber security and master in the near future. This is an overview list of required skills to enter the pantheon of this elite IT profession. I've broken the skills into three categories to help you go from one rung to the other more easily—fundamental, intermediate, and intangible skills. NB: For Educational Purpose Only The Fundamental Skills These are the basics that every beginner should know. Once you have a good grasp on everything in this section, you can move into the intermediary level. 1 Basic Computer Skills It probably goes without saying that to become a good hacker you need some basic computer s...
Read more

How to Use Maltego for Network Reconnaissance

By -
Image
Before you attempt to exploit any target on a network you've been authorized when pentesting, it is wise to do proper reconnaissance. Without doing reconnaissance, you will likely be wasting your time. In this tutorial, we will be using an active tool called   Maltego , developed by   Paterva , that can do many of these tasks with one simple scan. There is a community edition built into our Kali Linux that allows us 12 scans without purchasing Maltego. It is capable of a significant amount of information gathering about a prospective target in a single sweep of the domain. Using Maltego in Kali to Recon a Target Network Maltego is capable of gathering information about either a network or an individual; here we will focus on the network and leave individual information gathering for another time. We will be looking at gathering info on all the subdomains, the IP address range, the WHOIS info, all of the email addresses, and the relationship between the target domain and others...
Read more