cheatsheet
  • Cheatsheet
  • General
  • NMAP
  • Directory and subdomain Enum
  • SMB and RPC
  • DNS
  • LDAP
  • mimikatz
  • Bloodhound
  • SQL Injection
  • password crack
  • Active Directory
  • Wordpress
  • SQLMAP
  • Gitea
  • DS_Store
  • IIS
  • Cypher Injection
  • MSSQL
  • BackDrop CMS
Powered by GitBook
On this page
  • hashcat
  • John the ripper

password crack

hashcat

  • '--user' is used when hash is in 'username:password' format

hashcat -m 16900 vault_hashes /home/anurag/stuff/rockyou.txt --user

John the ripper

  • ansible2john

  • ssh2john

ssh2john rsa_key > id_rsa
chmod 600 id_rsa
john id_rsa --wordlist=/home/anurag/stuff/rockyou.txt

PreviousSQL InjectionNextActive Directory

Last updated 2 months ago