hashtopolis + hashcat

[golfreeze]

###On Hashtopolis client agent node running error on Ubuntu 16.04
Error during keyspace measure
/bin/sh: 1: ./hashcat-4.164.bin: not found

cd cracker/1/
cp hashcat64.bin hashcat-4.164.bin

then try again.

[golfreeze]

Build hashcat with GPU card 1080ti by packetlove.com team.

##reference link
http://www.netmux.com/blog/how-to-build-a-password-cracking-rig
https://www.blackhillsinfosec.com/build-password-cracker-nvidia-gtx-1080ti-gtx-1070/

[golfreeze]

hash rate calculate with GPU card 1080ti for password cracking
if hashrate 6GPUx 1080ti x 1rig ~ 222.4GH/s  (222400000000 hash/sec)

in case use hashcat to do password cracking
a-z = 26 character
A-Z = 26 char
0-9 = 10 char

password with small(26) + number(10) in  8 positions
calculate rate is =  ( 36^8 )/222400000000
Result: 12.6 sec

if password with small(26) + big capital (26)+ number(10) + big(26) in  8 positions
calculate rate is =  ( 62^8 )/222400000000 
= 218340105584896/222400000000
981.74507906877697841726
Result for cracking pass => 16 Min 21 Second


if password with small(26) + number(10) + big(26) in  10 positions
calculate rate is =  ( 62^10 )/222400000000 
Result: 43 days 16:17:08. (16hr with 17min and 8 sec)

and use calculator convert from sec to HH:MM:SS
https://www.tools4noobs.com/online_tools/seconds_to_hh_mm_ss/

[golfreeze]

Built-in charsets
?l = abcdefghijklmnopqrstuvwxyz
?u = ABCDEFGHIJKLMNOPQRSTUVWXYZ
?d = 0123456789
?h = 0123456789abcdef
?H = 0123456789ABCDEF
?s = «space»!"#$%&'()*+,-./:;<=>?@[\]^_`{|}~
?a = ?l?u?d?s
?b = 0x00 - 0xff

8 char simulation with [a-zA-Z0-9] and special character => ?a?a?a?a?a?a?a?a

[golfreeze]

###Core attack modes
Dictionary attack - trying all words in a list; also called “straight” mode (attack mode 0, -a 0)
Combinator attack - concatenating words from multiple wordlists (mode 1)
Brute-force attack and Mask attack - trying all characters from given charsets, per position (mode 3)
Hybrid attack - combining wordlists+masks (mode 6) and masks+wordlists (mode 7); can also be done with rules

####Masks
For each position of the generated password candidates we need to configure a placeholder. If a password we want to crack has the length 8, our mask must consist of 8 placeholders.

A mask is a simple string that configures the keyspace of the password candidate engine using placeholders.
A placeholder can be either a custom charset variable, a built-in charset variable or a static letter.
A variable is indicated by the ? letter followed by one of the built-in charset (l, u, d, s, a) or one of the custom charset variable names (1, 2, 3, 4).
l= [a-z]
u= [A-Z]
d= [0-9]
s= special character «space»!"#$%&'()*+,-./:;<=>?@[\]^_`{|}~
a = all type (l,u,d,s)

A static letter is not indicated by a letter. An exception is if we want the static letter ? itself, which must be written as ??.

[golfreeze]

##on mac
watch -n1 airport on scan
sudo /System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Resources/airport en0 sniff 6

ในส่วนของ sniff packet ที่เป็น .cap แปลงเป็น file .hccapx  ผ่านลิ้งด้านล่าง
https://hashcat.net/cap2hccapx/

[golfreeze]

เช็คความแข็งแรงของรหัสผ่าน
https://howsecureismypassword.net/
ประเมินว่าสามารถแกะได้ภายในกี่วัน

[golfreeze]

เราสามารถทำการ ติดตั้ง mail server + libsasl เพื่อใช้ในการส่งเมลผ่าน relaymail host ได้ครับ

sudo apt-get update
sudo apt-get install postfix libsasl2-modules -y

###re-configure postfix
dpkg-reconfigure postfix
and choose “Internet-site”

###edit to use sasl
vi /etc/postfix/main.cf

# specify SMTP relay host
relayhost = [mail.isp.example]
# enable SASL authentication
smtp_sasl_auth_enable = yes
# disallow methods that allow anonymous authentication.
smtp_sasl_security_options = noanonymous
# where to find sasl_passwd
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd


#vi /etc/postfix/sasl_passwd
Add the following line to the new file:
/etc/postfix/sasl_password
smtp.mailgun.org your_mailgun_smtp_user@your_subdomain_for_mailgun:your_mailgun_smtp_password

Next, protect the file by restricting read and write permissions to root and and use the postmap command to update Postfix's lookup tables to use this new file:
#chmod 600 /etc/postfix/sasl_passwd
#postmap /etc/postfix/sasl_passwd

###Restart service postfix
/etc/init.d/postfix restart