[ home ] [ q / soy / qa / r / nate ] [ a / health / incel / int / mtv / pol / psy / raid / sci ] [ overboard ] [ rules ] [ bans ] [ wiki ] [ booru ] [ archive ] [ merch ] [ donate ]

/sci/ - Soyence and Technology

Name
Options
Comment
File
Embed
Password (For file deletion.)

File: 1690625578893.png (51.18 KB, 362x395, za.png)ImgOps

 10389

TechGODs please help a yung retard out, I'm doxxing and have never done so before
I have the 2018 clubpenguin database leak which includes passwords stored as salted bcrypt hashes ($2y$05$)
From what I understand, I would need to run a password cracking tool in order to get the plaintext version of this pw, as hashing is a one-way process as oppposed to encryption
How would I go about this? Or am I better off just looking for their password via another means?

 10390

are you on linux/unix?

 10391

>>10390
also do you want to crack the whole database or a single password?

 10392

>>10390
>>10391
a single password, and i'm still a windowstroon for the time being

 10393

>>10392
i'm willing to finally go through with installing linux if it means getting this dox done albeit

 10394

>>10392
I guess that's fine, you'd want to use hashcat, which is available for windows
The syntax is rather simple, you can learn it from any one page blog tutorial. You'll specify the hashing algotithm and salt, but the hardest thing will be the password pattern. You'll have to decide on some character/word/number/symbol combination which you think the target chose for their password. Does it end with a birthday date? Is it X characters long? Does it have their name? And so on. You'll probably end up using an english dictionary (assuming that's the target's language) along with target specific data like their birthday, name, dog name ect ect, generate all possible permutations of that data and compare its hashes against the one you have.

 10395

>>10394
For creating dictionaries you'd want to use crunch, although I don't know if its available for windows. You can get really elaborate with the password pattern, choose the total number of specific characters and their specific place, do conditionals and much more

 10396

>>10395
At the end of a day it'll boil down to your CPU speed and knowledge about the target, I think you might be better off returning to osint. Have you tried doing the basic stuff like https://epieos.com/? Cracking passwords doesn't really fly anymore, most sites have 2FA, phishing and cookie stealing is the way to go these days

 10397

>>10389
If it's using salted bcrypt you're probably out of luck

 10398

>>10396
>>10397
i think you're right, sounds like it would be a better idea to gather more info instead of going this route considering the amount of time/guesswork involved vs. how much info i've gathered so far (which is in here: https://doxbin.com/upload/niggerwhodaredtopostjaksontwatter)

 10399


 10400

File: 1690627829411.png (86.92 KB, 904x561, ClipboardImage.png)ImgOps

>>10399
forgot pic, we have it's name

 10401

>>10400
that lines up with the club penguin username from the breach i got (SerenitySD)

 10402

File: 1690628016676.gif (292.1 KB, 498x455, slurpjak slurping.gif)ImgOps

>>10401
well happy hacking 'een, good luck

 10403

File: 1690628149313.png (264.94 KB, 632x756, ClipboardImage.png)ImgOps

>>10402
appreciated, thanks for the resources fellow chud

 10404

your best chance is finding rainbow tables online.
trying to generate a rainbow table by yourself is going to be useless since bcrypt is one of those modern hashing function that is designed to be computationally expensive even for GPUs.

 10451

>>10389
salted passwords can get a bit tricky
but generally you either get a hash table and look the hashes source up, or manually hash a long list of potential passwords
hashcat or aircrack-ng can help you with this, but aircrack is focused on wifi script kiddo shit, even doe it can be used for other stuff as well
>>10392
you cant do shit then, install a functional operating system if you want to do anything other than playing games and opening a web browser
>>10393
you should do it anyway
how do wintroons even cope with faggot flags in task bars??
LOL
>>10394
he will waste a ton of performance and thus wait longer, and pay more for electricity
all because he didnt want to install a real operating system…
besides, wintoddler CLI is a pain in the ass to use
you need root to make use of some fancy CPU model specific stuff too, its the same reason why you usually run crypto miners as root, to maximize performance

 10527

>>10451
hello gnuschizo



[Return][Go to top] Catalog [Post a Reply]
Delete Post [ ]
[ home ] [ q / soy / qa / r / nate ] [ a / health / incel / int / mtv / pol / psy / raid / sci ] [ overboard ] [ rules ] [ bans ] [ wiki ] [ booru ] [ archive ] [ merch ] [ donate ]