Technique
technique:password_hash_cracking
Also: hash cracking, password hash cracking
Repeatedly hashing candidate passwords and comparing them with stolen password hashes, including use of GPUs to accelerate the process.
Repeatedly hashing candidate passwords and comparing them with stolen password hashes, including use of GPUs to accelerate the process.
“he wanted to find a way to crack these passwords”
“cracking password hashes is process-intensive”
Using extracted password hashes and a cracking tool to recover passwords that might work on other network systems.
“he grabs this hash file to try to crack the passwords”
“He then runs a tool called John the Ripper”
Recovering passwords from hashes obtained from breached databases and testing the recovered passwords against other services.
“take the hash and just decrypt it yourself”
“search for that e-mail address in the breached databases, get the hash, crack the hash”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | INVOLVES | LinkedIn data breach | Explicit | 86 |
| incoming | USES | Os | Explicit | 101 |
| incoming | USES | Professor Dubstep | Explicit | 148 |
| incoming | USES | Spintire | Explicit | 148 |
LinkedIn data breach INVOLVES Password hash cracking
The stolen LinkedIn password hashes were posted for help cracking, and the hacker later used cracked passwords to access accounts.
Explicit Confidence 99% · Jack Rhysider EP 86 Details
“the hacker wanted to find a way to crack these passwords”
Os USES Password hash cracking
Os attempted to crack password hashes obtained from the compromised Windows computer.
Explicit Confidence 99% · Jack Rhysider EP 101 Details
“he grabs this hash file to try to crack the passwords on this computer”
Professor Dubstep USES Password hash cracking
Professor Dubstep says they recovered password hashes from leaked databases and decrypted or cracked them to obtain usable passwords.
Explicit Confidence 99% · Professor Dubstep EP 148 Details
“you could take the hash and just decrypt it yourself”
Spintire USES Password hash cracking
Professor Dubstep says Spintire searched leaked databases for credentials and used them to attempt access to other accounts.
Explicit Confidence 96% · Professor Dubstep EP 148 Details
“They were talking with each other about trying to hack into accounts using these databases”