xray VS john

Hi folks, I released bruter a golang tool that I enjoyed building:

It is a simple app that was built as an experiment while dusting my Go skils. It is indeed very much inspired by (https://github.com/evilsocket/xray) (but hey not copied ;)). The tooling can be used to test webservers and validate configurations, but not just!

What does it do?

It grabs HostInfo data from Shodan APIs, so you will need a Token to try this out

It collects banners for various services FTP, SSH, MYSQL, IRC, SMTP

It collects HTTP headers

It brute force directories on WebServers and reports results (200, 403)

It produces a Web UI for presentation

Check it out and let me know what you think! Feedbacks are very welcome :D

It is a simple app that was built as an experiment while dusting my Go skils. It is indeed very much inspired by (https://github.com/evilsocket/xray) (but hey not copied ;)). The tooling can be used to test webservers and validate configurations, but not just!

XRay - Network (sub)domain discovery and reconnaissance automation tool.

John The Ripper

🔗Kali Linux Wordlist: What you need to know 🔗crunch 🔗WordLists - Kali-Tools 🔗WordLists - GitLab - repository 🔗John - Kali-Tools . 🔗Openwall -github repository -John 🔗John-The-Ripper-Tutorial - Techy Rick 🔗Openwall -John - Offical Website . 🔗Hash Cat - Wiki 🔗Cap 2 Hashcat 🔗Markov - Chain 🔗Hash Cat - Forums 🔗Security Stack Exchange - Question 260773 🔗StationX - How to use Hashcat 🔗MSF/Wordlists - charlesreid 🔗MSFConsole 🔗How to use hashcat 🔗MSF/Wordlists - charlesreid1 🔗Where do the words in /usr/share/dict/words come from? 🔗SCOWL (Spell Checker Oriented Word Lists) 🔗The spell utility -spell - find spelling errors (LEGACY) - UNIX What are Different Types of Cryptography? sha1-vs-sha2-the-technical-difference-explained-by-ssl-experts/ 🔗password-encryption 🔗Secure-Programs SHA-1 🔗What-are-computer-algorithms 🔗What Are MD5, SHA-1, and SHA-256 Hashes, and How Do I Check Them? - howtogeek.com 🔗kali-linux-wordlist-what-you-need-to-know

Ok, both John the ripper, hashcat and other tools seem to support extracting the hash, or directly trying to discover the password.

With the root hash you can crack the root password using tools like John The Ripper[0]. More generally, I assume, this exploit can be used to read any arbitrary files on the system, bypassing regular access control, and plenty of other stuff you aren't supposed to be able to do as a non-privileged user.

0: https://www.openwall.com/john/

use (John the Ripper)[https://github.com/openwall/john] and (rockyou.txt)[https://github.com/rockyou.txt]

this actually seems to have been reported as a bug and fixed years ago but it is still affecting me on a version freshly downloaded from the AUR, is there a way around this or another program i can use?

John the Ripper

Since I used to work for the employer in question, I decide to crack my own password-protected pay statements. I downloaded and built John the Ripper jumbo and then all I had to do was run a few commands after looking at the documentation, and there was my SIN number almost instantly.

However, most credential brute forcing takes place offline against a leaked database from some site. A program like John the Ripper is used to try hashing each word in a dictionary until it matches the entries in the database. Because this all happens offline, there's no mechanism in place to delay the attempts or lock the user out.