Password Attacks

Prompts and answers

• Which type of password attack is performed locally?
  Password cracking
• What are the default login credentials (in the format of username:password) for a Juniper Networks ISG 2000 device? Make sure to check the hint.
  netscreen:netscreen
• Run the following crunch command:crunch 2 2 01234abcd -o crunch.txt. How many words did crunch generate?
  81
• What is the crunch command to generate a list containing THM@% and output to a file named tryhackme.txt?
  crunch 5 5 -t "THM^^" -o tryhackme.txt
• Considering the following hash: 8d6e34f987851aa599257d3831a1af040886842f. What is the hash type?
  sha-1
• Perform a dictionary attack against the following hash: 8d6e34f987851aa599257d3831a1af040886842f. What is the cracked value? Use rockyou.txt wordlist.
  sunshine
• Perform a brute-force attack against the following MD5 hash: e48e13207341b6bffb7fb1622282247b. What is the cracked value? Note the password is a 4 digit number: [0-9][0-9][0-9][0-9]
  1337
• What syntax would you use to create a rule to produce the following: "S[Word]NN where N is Number and S is a symbol of !@?
  Az"[0-9][0-9]" ^[!@]
• Can you guess the FTP credentials without brute-forcing? What is the flag?
  THM{d0abe799f25738ad739c20301aed357b}
• What is the password? Note that the password format is as follows: [symbol][dictionary word][0-9][0-9].
  !multidisciplinary00
• Perform a brute-forcing attack against the phillips account for the login page at http://MACHINE_IP/login-get using hydra? What is the flag?
  THM{33c5d4954da881814420f3ba39772644}
• Perform a rule-based password attack to gain access to the burgess account. Find the flag at the following website: http://MACHINE_IP/login-post/. What is the flag?
  THM{f8e3750cc0ccbb863f2706a3b2933227}
• Perform a password spraying attack to get access to the SSH://MACHINE_IP server to read /etc/flag. What is the flag?
  THM{a97a26e86d09388bbea148f4b870277d}