Timave Posted May 7, 2018 Share Posted May 7, 2018 I have a client that had their servers get encrypted with DiskCryptor and i was wondering if i can try a brute force payload with the bashbunny to try and crack the password? SInce this is a debian box is there a way i can load john the ripper and some password files to it? Quote Link to comment Share on other sites More sharing options...
RazerBlade Posted May 7, 2018 Share Posted May 7, 2018 Use hashcat instead Quote Link to comment Share on other sites More sharing options...
Timave Posted May 7, 2018 Author Share Posted May 7, 2018 how would i deploy that on the BB? Quote Link to comment Share on other sites More sharing options...
Timave Posted May 8, 2018 Author Share Posted May 8, 2018 NM found DEB package Quote Link to comment Share on other sites More sharing options...
PoSHMagiC0de Posted May 8, 2018 Share Posted May 8, 2018 Hashcat requires a GPU or a CPU that support ICD. The BB has neither so hashcat will not run. John would though but slow seeing the BB CPU is not the same as a laptop or desktop CPU. It will get very hot too. Best bet is to boot with a kali live USB on that machine, mount drive..if you can or crack drive with john. If server has GPU then install the drivers in the live environment and use hashcat. Quote Link to comment Share on other sites More sharing options...
RazerBlade Posted May 8, 2018 Share Posted May 8, 2018 But to be realistic here, why would anyone try to crack an actual password hash with the bunny. You would probably just overheat it and kill it if you did try it. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.