How to crack Cisco 7 “encrypted” passwords with a simple tool.

This website will crack Cisco 7 passwords instantly. http://www.ibeast.com/content/tools/ciscopassword/. This shows that this type of “encryption” is useless when an attacker has access to view the configuration of the switch. Better to use more stringent encryption like 4096 bit. But this is the way that Cisco work. If you get access to a Cisco switch … Read more

Sample Linux password files and how they work.

The /etc/passwd file contains each user, one on each line. And the user ID number, then the home directory and the shell used by that user. /etc/passwd1 2 3 4 5 sifiso:x:554:554::/home/commitec/mail/commitec.co.za/sifiso:/bin/bash info:x:554:554::/home/commitec/mail/commitec.co.za/info:/bin/bash sales:x:554:554::/home/commitec/mail/commitec.co.za/sales:/bin/bash admin:x:554:554::/home/commitec/mail/commitec.co.za/admin:/home/commitec siphiwos:x:1794:1790::/home/commitec/mail/commitec.co.za/siphiwos:/home/commitecsifiso:x:554:554::/home/commitec/mail/commitec.co.za/sifiso:/bin/bash info:x:554:554::/home/commitec/mail/commitec.co.za/info:/bin/bash sales:x:554:554::/home/commitec/mail/commitec.co.za/sales:/bin/bash admin:x:554:554::/home/commitec/mail/commitec.co.za/admin:/home/commitec siphiwos:x:1794:1790::/home/commitec/mail/commitec.co.za/siphiwos:/home/commitec Then the /etc/shadow file contains the username again, then the encrypted password. The password is … Read more

How to find saved WIFI passwords in Ubuntu easily.

To find all the saved WIFI passwords and Ethernet connection information on your Linux desktop or laptop, navigate to this directory. /etc/NetworkManager/system-connections/etc/NetworkManager/system-connections Here are the connections on my laptop. ┌─[root@parrot]─[/etc/NetworkManager/system-connections] └──╼ #ls -hula total 20K drwxr-xr-x 2 root root 4.0K Aug 24 13:36 . drwxr-xr-x 7 root root 4.0K Aug 24 13:29 .. -rw——- 1 … Read more

Generate an assortment of random passwords with a simple command.

Generate secure passwords for your user accounts The pwgen command will generate a set of random passwords that may be used to secure your user account. Type this command to install this utility. root@DESKTOP-R72SPS3:~# apt-get install pwgenroot@DESKTOP-R72SPS3:~# apt-get install pwgen Now we can generate a few passwords. jason@DESKTOP-R72SPS3:/mnt/c/Users/johnc$ pwgen -s -v 79lZrgzb ctklTCV3 zX3nDCQr FXk5g7V8 … Read more

Cracking Windows 10 passwords with john the ripper on Kali Linux 2016.

Break Windows 10 password hashes with Kali Linux and John the Ripper Cracking the SAM file in Windows 10 is easy with Kali Linux. Use a Live Kali Linux DVD and mount the Windows 10 partition. Firstly, get the SAM and SYSTEM files from the C:\Windows\System32\config folder. Copy these to your desktop directory. Then dump … Read more

How to list all passwords on a Cisco switch.

This Cisco command will list all passwords on a switch. mrrobot#sh ru | inc password service password-encryption password 7 00141215174C04140B70 password 7 00141215174C04140B70mrrobot#sh ru | inc password service password-encryption password 7 00141215174C04140B70 password 7 00141215174C04140B70 The inc command looks for any text that matches the argument. Like this: mrrobot#sh ru | inc line line con … Read more

Debian 8 still stores WIFI passwords in plain text.

The /etc/NetworkManager/system-connections directory in Debian and Ubuntu stores files that are named after the WIFI networks you have connected to. These contain the passwords for the wireless networks that your machine has connected to. Here is a sample file. [connection] id=detportal uuid=539c7711-95ba-4f0a-8797-33d32ec779d7 type=802-11-wireless   [802-11-wireless] ssid=detportal mode=infrastructure security=802-11-wireless-security   [802-11-wireless-security] key-mgmt=wpa-psk psk=detportal   [ipv4] method=auto … Read more

How to crack Linux passwords using john the ripper.

Firstly, for the purposes of this exercise, we are creating a new user with a simple password. I used a user named “vaas” and gave him the simple password “password”. Then run this command to create the file that john the ripper will be using. ubuntu@ip-172-31-20-16:~$ sudo unshadow /etc/passwd /etc/shadow > pass.outubuntu@ip-172-31-20-16:~$ sudo unshadow /etc/passwd … Read more

Linux storing passwords in plain text. Here is the truth of the matter.

The NetworkManager daemon on Linux does store WIFI passwords in plain text, but you need root access to read the files. Here is a sample WIFI connection file in /etc/NetworkManager/system-connections. homer@deusexmachina /etc/NetworkManager/system-connections $ sudo cat PIZZACATSWIFI [connection] id=PIZZACATSWIFI uuid=f4f0260d-ca5e-4b86-808d-3dce65fa80cf type=802-11-wireless   [802-11-wireless] ssid=PIZZACATSWIFI mode=infrastructure mac-address=4C:0F:6E:5D:E1:25 security=802-11-wireless-security   [802-11-wireless-security] key-mgmt=wpa-psk auth-alg=open psk=302c64ff12   [ipv4] method=auto   … Read more

Examples of the worst passwords that are currently in use around the world.

These are the most commonly used passwords that users all over the world currently use. It is not too hard to generate a better password using multiple combinations of upper and lower case letters and numbers coupled with other characters. This will help you create a proper password that will keep your data safe. Most … Read more

Users still creating weak passwords. More care is needed for safety.

It is not surprising that so many Facebook accounts get cracked into and the data used for evil purposes. The users need to wake up and pay more attention to security. I have a very complex password on my site and everyone on Facebook or Friendface or whatever site you use should have a good … Read more