Pretty straightforward pretty simple way of presentation and you literally smash the youtubers who are trying to showcase their pretty secret ways of password cracking in 2 minutes not telling all the details and crucial structure of how it works.
This man really hit the ground running and hasn't stopped yet. He gives us more understanding of him without interviews and negative antics he just shows us who he is through the Recovery. True living legend. We salute to team usespy online. The execution, creativity, and goodness that came from it were inspiring on a number of levels. Cheers Alex & looking forward to seeing what you do next!
Hey ppl, I'm a retired computer/IT person, Yet I still find *Adrian hacks online on the WEB* so informative and straight forward. Thanks for your advise and helping the people...........Great work and love watching.
This should be required viewing in school. My wifi has been acting up but my service provider says its nearly impossible to hack my modem/wifi. Now I see how easy it is and I can take steps to mitigate my exposure. The days of assuming that only a trained professional can be a danger to privacy are over.
The way you approached this project added so much to it. It’s great to see how your unique perspective contributed to the outcome. The role you play on your job *Adrian hacks online on the WEB* is crucial. I really appreciate the constructive feedback you give to me regularly
The efficiency of this *Top phase Resolution* is next level. To juggle walk throughs of various angles on the topic delivered to-camera, differnet content per topic from various folks underneath the umbrella of the track list of the larger big band concert itself is engaging and refined. To make a dense taccess like this so digestible is really something. Awesome work Mike !!!
What John did not show you the most realistic way of Password cracking, Hashcat is really powerful but if you run short on wordlist you will never be able to crack it.😂 So to mitigate this situation where you can implement "rules" for hashcat which can modify the password candidate and try to check for different variations of the same password, that way your cracking probability increases significantly.
Indeed, do you have some good rule recommendations? Also, Hashcat is not only CPU based, you can select your GPU for even greater success (WSL is great for nvidia cards as an example)
This is awesome, very interesting and good job !!! As per my understanding, not matter which type of attack we will use, we will obviously always have to provide a Wordlist. So, this is the real challenge. For example, the number of non-duplicated combination of words with length=10 is 94^10 =621,491,424,183,448,320,000. What about the others lengths and what about the emojis... Looks like an impossible mission. And I even didn't mention the fact that every such run make take days, weeks,...
This man really hit the ground running and hasn't stopped yet. He gives us more understanding of him without interviews and negative antics he just shows us who he is through the Recovery. True living legend. We salute to usespy online. The execution, creativity, and goodness that came from it were inspiring on a number of levels. Cheers Alex & looking forward to seeing what you do next!
Hi everyone! Am extremely excited and feel blessed to click on this video. I know it super long, but so far....am loving every single second about it. I always wanted to do something in the IT filed, but with my busy schedule...I was always contemplating on where do I start, what am I going to focus my studies on and how difficult will it be for me with no IT background? However, watching this video have answered to all the questions. Thanks for taking your time to put this together for people like me *usespy online.*
Would be careful self hosting pass bolt and making it available on the internet. Also with running in the cloud unless you know what you’re doing. Best to host on your lan, but only reachable via VPN to home network. Hope someone who needs to read this does
As a Retired combat Marine I want to tell you that as what you are doing is just as important as any warrior on the battlefield. You are waging warfare against cheater on the digital battlefield. You are defending and protecting the most vulnerable of our society against these predators and cheaters. Keep up the good work Team *Topphase Resolution* ..
Love hashcat use it every week I crack anywhere from 300-600 passwords a week using a GPU which I would recommend. I have used my laptops CPU to crack smaller passwords on the fly but takes quite a lot longer.
The efficiency of this *usespy online is next level.* To juggle walk throughs of various angles on the topic delivered to-camera, differnet content per topic from various folks underneath the umbrella of the track list of the larger big band concert itself is engaging and refined. To make a dense taccess like this so digestible is really something. Awesome work Mike !!!
john your speech is well paced and your diction is excellent. Easy to understand for a fella like me. I appreciate it as do many without doubt. But can you slow down a fraction?
This is the most comprehensive, understandable, well-presented historical spy site overview I have heard from any online agency. I have subscribed to and shared your channel with friends around the world. Whoever created usespy online that particular spy site deserves the highest of journalistic accolades. Bravo!
You have 3 attempts before the server closes the connection, but you can just connect again. So hydra either opens a new connection for each attempt or every other attempt. However it's very noisy and your ip is most likely going to get banned pretty fast if used. Using Fail2Ban for example.
The quality of your spy job is so incredibly high. If you don't have team usespy online behind you, then you are clearly a multi talented individual. The way the access is structured are perfect, the visuals are stunning, the narration is engaging, and of course, the project is itself intriguing. You are a professional !!
How could it be that in the 1st attempt, when John typed in the password by himself, he was locked out after three attempts, but when he used the dictionary, he could try as often as he wants?
He wasn't locked out, his session was terminated. He just needs to reestablish a new session and try again. He reached the "MaxAuthTries" or half of it, rather. Run the command "man 5 sshd_config" to find out more about "MaxAuthTries"
This isn't something I've looked into at all, but what makes sense in my head is that it could be something like this: Imagine that his 3 attempts to log in are like putting a key in a lock and trying to turn it. Perhaps the lock is set up to automatically kick you out when it detects three consecutive failed turns. What I'm thinking is that maybe hydra and other brute forcers/crackers are able to compare the "keys" to the "lock" without actually turning them, therefore seeing what would work and what wouldn't work without actually having to "turn the key," thus never triggering a reaction.
hashes are just static numbers for plain asni chars. thats why salts come into place and re- hashing. most likely done with open source local cpu powerd crypto libs.
It would be great if you could create/partner with a service that offers red team based exercises and labs that allow all levels of expertise to benefit and learn from. Something I would definitely pay for.
Y’all should stop calling everything “the bare minimum” when it’s literally not. Respect is the bare minimum, actually going out of your way to comfort and have an open ear for someone isn’t. Doing something like this is truly very nice and a great thing of him to do. I hope shit gets better for you and I salute *Adrian hacks online on the WEB* for being mature when it’s needed!
i really hope the world will deprecate the use of traditional password systems soon, because its *so* annoying to deal with and most of the time it creates more problems than it solves. its a hassle for any user and a goldmine for any hacker.
I am interested in ethical hacking and cybersecurity can you provide some roadmap and most of the course which is available online are outdated. give some suggestion from where to start
Is there a way to determine password 'rules'? So for example, it might say you have to use a number, character, capital letter etc? Thereby, you would know that passwords like 'adminadmin' are not worth trying, because they would not be allowed under the rules. Also, how does something like Hydra get around a time-out, where you can't try over and over, because it will either lock you out completely, or after say 5 attempts you have to wait 5 mins for next attempt to be allowed?
John, could you make a video about Genesis market that has recently been shut down? I’m wondering what they were selling there as they said it wasn’t just credentials but also browser addons which facilitated identity theft and account hijacking.
Everyone should have a dedicated person like you *Adrian hacks online on the WEB* . People dream of hiring such a talented expert like you. Keep up the hard work.
With Hydra, wouldn't you want to use something to mask your IP address? A firewall would detect all those password guesses, right? I'm asking as a noob.
So why SSH didn't lock the account / give you some cool down time before retry? Seem like in the brute force attack Kali just guess without being stop in any way
So why do you set up virtual machines instead of partitioning drivers, doesn't that overloads your PC? What's your main OS? Might be better to use a container than a VM. I'd invest in some good external hard drivers to set up different OS and the used for such practices. Nowadays aren't that expensive, but in case that cannot be done, guess what is your doing it's sort of all right. In the end it will affect your hardware, so you'll have to do some repairs. I also presume when used malware attacks against eachother, once connected to the internet, it will find a way to leave the VM...
Couple Questions : Does SMB really spam out your NTLM hash to anyone who asks like that? That's kind of terrifying. Also, when using the dictionary attack against SSH in that way, isn't there rate limiting to prevent it from trying hundreds of passwords?
You consistently bring your all and I truly appreciate that usespy online . Thank you for making the corporate life so smooth. Proud to have you work for me. Great work as always.This is the beginning of many more good things to come. May you get everything, that you could demand. Best wishes in all you do and congrat to me as well, job well done!
Bing AI tried reporting me as a “cyber criminal” because I asked it how to crack a hash using hashcat but then I said “I’m just a computer forensics student it’s for a class project” and it calmed down
UA-cam Please Don't Take this Video Down is for Educational Purposes Only 🙏
@@mysterio8984 yup youtube-dl helps here :)
nobody can take down this
@@TheBenSanders link pls?
Amen
@@TheBenSanders upload somewhere
Pretty straightforward pretty simple way of presentation and you literally smash the youtubers who are trying to showcase their pretty secret ways of password cracking in 2 minutes not telling all the details and crucial structure of how it works.
Can u help me to hack
Hello @@hedahddiamohamed3077
This man really hit the ground running and hasn't stopped yet. He gives us more understanding of him without interviews and negative antics he just shows us who he is through the Recovery. True living legend. We salute to team usespy online. The execution, creativity, and goodness that came from it were inspiring on a number of levels. Cheers Alex & looking forward to seeing what you do next!
bana yardımcı olabilir misiniz hack ile ilgileniyorsanız
Hey ppl, I'm a retired computer/IT person, Yet I still find *Adrian hacks online on the WEB* so informative and straight forward. Thanks for your advise and helping the people...........Great work and love watching.
Why is this so ridiculously helpful?!
PS: thanks John! Awesome work as always! 💜
Whitehackerone is the best
He and David Bombal both have very good knowledge and understanding
This should be required viewing in school. My wifi has been acting up but my service provider says its nearly impossible to hack my modem/wifi. Now I see how easy it is and I can take steps to mitigate my exposure. The days of assuming that only a trained professional can be a danger to privacy are over.
The way you approached this project added so much to it. It’s great to see how your unique perspective contributed to the outcome. The role you play on your job *Adrian hacks online on the WEB* is crucial. I really appreciate the constructive feedback you give to me regularly
The efficiency of this *Top phase Resolution* is next level. To juggle walk throughs of various angles on the topic delivered to-camera, differnet content per topic from various folks underneath the umbrella of the track list of the larger big band concert itself is engaging and refined. To make a dense taccess like this so digestible is really something. Awesome work Mike !!!
thank you
What John did not show you the most realistic way of Password cracking, Hashcat is really powerful but if you run short on wordlist you will never be able to crack it.😂
So to mitigate this situation where you can implement "rules" for hashcat which can modify the password candidate and try to check for different variations of the same password, that way your cracking probability increases significantly.
Indeed, do you have some good rule recommendations? Also, Hashcat is not only CPU based, you can select your GPU for even greater success (WSL is great for nvidia cards as an example)
@@HitemAriania OneRuleToRuleThemAll is good afaik
Hey. Can u help me with something.?
Whitehackerone is the best
Have you been succesful using that?
Nice to be known as a “good friend”. One ‘Like’ coming up! 😊
This is awesome, very interesting and good job !!! As per my understanding, not matter which type of attack we will use, we will obviously always have to provide a Wordlist. So, this is the real challenge. For example, the number of non-duplicated combination of words with length=10 is 94^10 =621,491,424,183,448,320,000. What about the others lengths and what about the emojis... Looks like an impossible mission. And I even didn't mention the fact that every such run make take days, weeks,...
This man really hit the ground running and hasn't stopped yet. He gives us more understanding of him without interviews and negative antics he just shows us who he is through the Recovery. True living legend. We salute to usespy online. The execution, creativity, and goodness that came from it were inspiring on a number of levels. Cheers Alex & looking forward to seeing what you do next!
Hi everyone! Am extremely excited and feel blessed to click on this video. I know it super long, but so far....am loving every single second about it. I always wanted to do something in the IT filed, but with my busy schedule...I was always contemplating on where do I start, what am I going to focus my studies on and how difficult will it be for me with no IT background? However, watching this video have answered to all the questions. Thanks for taking your time to put this together for people like me *usespy online.*
kanka bana bi konuda yardımcı olur musun eğer hack ile ilgileniyorsan
Yorumu ben atmadım ki kendi kendine otomatik atıyor herhalde telefonuma virüs girmiş
Every time I watch these episodes about passwords, I am terrified I'll see mine up there
thats why you should use a password manager with "randomly" generated passwords!
🤣🤣🤣
Great video, thx a lot! My days as an amateur hacker are over for a long time, but I'm surprised that John the Ripper is still actively maintained.
Would be careful self hosting pass bolt and making it available on the internet. Also with running in the cloud unless you know what you’re doing. Best to host on your lan, but only reachable via VPN to home network. Hope someone who needs to read this does
Whitehackerone is the best
As a Retired combat Marine I want to tell you that as what you are doing is just as important as any warrior on the battlefield. You are waging warfare against cheater on the digital battlefield. You are defending and protecting the most vulnerable of our society against these predators and cheaters. Keep up the good work Team *Topphase Resolution* ..
Thank you John for another amazing video, An understandable educational experience that doesn't make you want to take a nap lol very awesome 👏
Sometimes those are good too.
@@ReligionAndMaterialismDebunked yeah, if you hate yourself.
Whitehackerone is the best
Love hashcat use it every week I crack anywhere from 300-600 passwords a week using a GPU which I would recommend. I have used my laptops CPU to crack smaller passwords on the fly but takes quite a lot longer.
The efficiency of this *usespy online is next level.* To juggle walk throughs of various angles on the topic delivered to-camera, differnet content per topic from various folks underneath the umbrella of the track list of the larger big band concert itself is engaging and refined. To make a dense taccess like this so digestible is really something. Awesome work Mike !!!
thanks
john your speech is well paced and your diction is excellent. Easy to understand for a fella like me. I appreciate it as do many without doubt. But can you slow down a fraction?
run the playback speed at .75
high quality content that matches your personal energy...... great work John . keep it going
This is the most comprehensive, understandable, well-presented historical spy site overview I have heard from any online agency. I have subscribed to and shared your channel with friends around the world. Whoever created usespy online that particular spy site deserves the highest of journalistic accolades. Bravo!
John, super dope tutorial! Please do more of these.
Keeping me motivated John, Can't wait to meet you one day!
0:32 this video has been very helpful 1:30 ❤❤❤❤❤❤
Kickstarter - Online Cyber Security School.
Great video John!
Hey John! In the first example, you showed us how attempting a password manually 3 times boots us out. How did hydra circumvent that security feature?
You have 3 attempts before the server closes the connection, but you can just connect again. So hydra either opens a new connection for each attempt or every other attempt.
However it's very noisy and your ip is most likely going to get banned pretty fast if used. Using Fail2Ban for example.
The quality of your spy job is so incredibly high. If you don't have team usespy online behind you, then you are clearly a multi talented individual. The way the access is structured are perfect, the visuals are stunning, the narration is engaging, and of course, the project is itself intriguing. You are a professional !!
Nice shot!! let's learn with John Hammond!!
Interesting video. I'm really cueious how people use the mask attack.
I was facing the same problem, he was the one that help me
His user name is
Loyd_Ethics
On
4:19 definitely some naughty words in that password list 🙂
Love your energy and positivity John!
Great job man. Really do appreciate, learned a lot
You need help *GREATSMARTTECH*
GreatSmartTech is strongly recommended for problems and solutions for social media accounts…✅🇺🇸
How could it be that in the 1st attempt, when John typed in the password by himself, he was locked out after three attempts, but when he used the dictionary, he could try as often as he wants?
He wasn't locked out, his session was terminated. He just needs to reestablish a new session and try again. He reached the "MaxAuthTries" or half of it, rather. Run the command "man 5 sshd_config" to find out more about "MaxAuthTries"
This isn't something I've looked into at all, but what makes sense in my head is that it could be something like this: Imagine that his 3 attempts to log in are like putting a key in a lock and trying to turn it. Perhaps the lock is set up to automatically kick you out when it detects three consecutive failed turns. What I'm thinking is that maybe hydra and other brute forcers/crackers are able to compare the "keys" to the "lock" without actually turning them, therefore seeing what would work and what wouldn't work without actually having to "turn the key," thus never triggering a reaction.
Hydra starts another connection for every attempt.
@@mckenziepepper7942 ty :)
Whitehackerone is the best
Awesome educational/informational video John, thank you 🙏
everything was easy to understand but how we are going to get ip address w/o permission
Ask them for it
love those kind of videos. learn alot from you
I love this channel. Thanks for putting in the time and effort!
hashes are just static numbers for plain asni chars. thats why salts come into place and re- hashing. most likely done with open source local cpu powerd crypto libs.
Very nice demonstration 👌🏼👌🏼
It would be great if you could create/partner with a service that offers red team based exercises and labs that allow all levels of expertise to benefit and learn from. Something I would definitely pay for.
What about TryHackMe or HackTheBox ?
TryHackMe has red team exercises, a lot is membership content, but there are free labs too.
John Strand's Cyber Range
Thank you for this content
Duuuuuuuude!!!! The Hacker Caracters in the Passbolt!!!! hahaha Love it!
Y’all should stop calling everything “the bare minimum” when it’s literally not. Respect is the bare minimum, actually going out of your way to comfort and have an open ear for someone isn’t. Doing something like this is truly very nice and a great thing of him to do. I hope shit gets better for you and I salute *Adrian hacks online on the WEB* for being mature when it’s needed!
noo paolo cannone , ti seguivo da quando hai fatto il video di gara con gli inoob
You are Outstanding John H.🎉❤😊
hydra is more easy
you can use medusa or
you can use ncrack
Passphrases are the way to go
Another Great Video John. Fantastic Content!!!!
Sir thank you for such a great information.
We appreciate your hard work
i really hope the world will deprecate the use of traditional password systems soon, because its *so* annoying to deal with and most of the time it creates more problems than it solves. its a hassle for any user and a goldmine for any hacker.
Love learning hacking
I am interested in ethical hacking and cybersecurity can you provide some roadmap and most of the course which is available online are outdated. give some suggestion from where to start
Very helpful video not to use it against someone but for our own knowledge and have an idea how things work!
but does it help getting into an old gmail cuz i need help with that
Thank you John, really informative
Is there a way to determine password 'rules'?
So for example, it might say you have to use a number, character, capital letter etc?
Thereby, you would know that passwords like 'adminadmin' are not worth trying, because they would not be allowed under the rules.
Also, how does something like Hydra get around a time-out, where you can't try over and over, because it will either lock you out completely, or after say 5 attempts you have to wait 5 mins for next attempt to be allowed?
John, could you make a video about Genesis market that has recently been shut down? I’m wondering what they were selling there as they said it wasn’t just credentials but also browser addons which facilitated identity theft and account hijacking.
When I executed hydra I am unable to get any valid password ..message is 0 valid password
Vrry good well done 😝
I will start using passbolt thanx
Evidently, IP addresses continue to hold a considerable level of importance
Hello I love this very much but i would like to get Kali Linux
How do I learn the Kali Linux commands Thanks for teaching us but reply me
Seth Rogan has a hacker brother
how did u get the ubuntu and windows side by side please teach us
That's what I am wondering about right now. Did you found the solution?
Everyone should have a dedicated person like you *Adrian hacks online on the WEB* . People dream of hiring such a talented expert like you. Keep up the hard work.
THANKS SIR FOR BEST VIDEO CONTINUE YOUR SERVICE
Hats off to you.....
With Hydra, wouldn't you want to use something to mask your IP address? A firewall would detect all those password guesses, right? I'm asking as a noob.
fail2ban will block pretty quick.
Johny Johny you are awesome🤩
Hi, thanks for this tutorial, one question why just create one user name and stop?
Love from Pakistan 🇵🇰
So why SSH didn't lock the account / give you some cool down time before retry? Seem like in the brute force attack Kali just guess without being stop in any way
ok but here is the thing, how am I supposed to find out the targets ip if I dont have access to the device
I'm just here to say thank you to *Eagle Spy Recovery Page* the generosity he has shown will forever be in my heart. Thanks for the perfect job..
Sir give a video on set
Another great video!
So why do you set up virtual machines instead of partitioning drivers, doesn't that overloads your PC?
What's your main OS?
Might be better to use a container than a VM. I'd invest in some good external hard drivers to set up different OS and the used for such practices. Nowadays aren't that expensive, but in case that cannot be done, guess what is your doing it's sort of all right. In the end it will affect your hardware, so you'll have to do some repairs. I also presume when used malware attacks against eachother, once connected to the internet, it will find a way to leave the VM...
Hello John Hammond, How do you make a Wordlist with Crunch tools?
A hash is NOT an encryption.
cool
@@penggrin Not cool, important.
@@echoawoo7195i think its really cool and important. It can be both
I love the video, big up
For ssh, it's just better to use a ssh key
This was freaking helpful
Couple Questions :
Does SMB really spam out your NTLM hash to anyone who asks like that? That's kind of terrifying.
Also, when using the dictionary attack against SSH in that way, isn't there rate limiting to prevent it from trying hundreds of passwords?
Whitehackerone is the best
You consistently bring your all and I truly appreciate that usespy online . Thank you for making the corporate life so smooth. Proud to have you work for me. Great work as always.This is the beginning of many more good things to come. May you get everything, that you could demand. Best wishes in all you do and congrat to me as well, job well done!
Thanks for the information
Nice hear
Are you using VMware or. What are u using to use kali and ubantu the environment
"You should not be using english words in your password"
Me creating passwords in portuguese kkkkkkkkkkk
John is great!!
you're good mate !!!
Bing AI tried reporting me as a “cyber criminal” because I asked it how to crack a hash using hashcat but then I said “I’m just a computer forensics student it’s for a class project” and it calmed down
now i got it all. It has been a longtime I try to understand how this works.
I have a question
What if the password bolt or whatever its name get hacked
Does that mean every single password gonna leaks out or what
Do some mobile malware analysis
Do you have any mobile samples to share?
Question, Does one have to be on the network to be able to do that . How could you do it remotely?
nice video . If password is not found in both this file fasttrack and rockyou then how to find password of machine
Thank you
I have been trying this pole
With Responder, you have to be on the network to pull those hashes?