Fast password cracking - Hashcat wordlists from RAM
Channel: DFIRScience
Date: 2022-06-15

Password cracking often takes a long time. Brute force is normally your last option. But before that, a wordlist usually helps guess the password faster.

Popular wordlists like Rockyou are good for general cases, but making password lists specific to the user can produce faster results. One of the best data sources to produce a customized wordlist is a target's RAM.

Thank you to our Members and Patrons, but especially to our Investigators, TheRantingGeek, Roman, and Alexis Brignoni! Thank you so much!

We show how to use strings to extract password candidates from a RAM dump and use the resulting wordlist with Hashcat, a high-powered password cracking software.

00:00 Custom wordlists for Hashcat
00:45 Why use memory for wordlists?
02:07 What you need to begin
02:50 Dump strings from memory with strings
05:09 Count the total number of password candidates from memory
05:49 Optimize by removing duplicates
07:36 Optimize by removing obviously wrong strings
08:16 Use the wordlist with hashcat
10:39 Why so fast?
11:10 Password cracking general procedure
11:50 Conclusions

https://bit.ly/2Ij9Ojc - 👍 Subscribe for weekly videos

 ❤️ Get early access and bonus content - https://bit.ly/DFIRSciMember

Links:
* https://hashcat.net/hashcat/

Related book:
* Hash Crack: Password Cracking Manual v3 (https://amzn.to/3Hmpe63)

#hashcat #wordlist #forensics #dfir
010001000100011001010011011000110110100101100101011011100110001101100101 
Get more Digital Forensic Science
  👍 Subscribe → https://bit.ly/2Ij9Ojc
  ❤️ YT Member → https://bit.ly/DFIRSciMember
  ❤️ Patreon → https://www.patreon.com/dfirscience
  🚀 Forensic Courses → https://learn.dfir.science

🕸️ Blog → https://DFIR.Science
🤖 Code  → https://github.com/DFIRScience
🐦 Follow → https://www.twitter.com/DFIRScience
📰 DFIR Newsletter → https://bit.ly/DFIRNews
010100110111010101100010011100110110001101110010011010010110001001100101

Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License. Please link back to the original video. If you want to use this video for commercial purposes, please contact us first. We would love to see what you are doing.