Named after the sons of Adam and Eve, this tool recovers the passwords using different methods like network packet sniffing and performing attacks like brute force, dictionary attack,.
- On a mac if you are just trying to reset a password boot into recovery (this only works on 10.8, and 10.7) open terminal under utilities, and type 'resetpassword' it will open a window. Type new password.
- RainbowCrack is a hash cracker tool that uses a large-scale time-memory trade off process for faster password cracking than traditional brute force tools. Time-memory trade off is a computational process in which all plain text and hash pairs are calculated by using a selected hash algorithm.
I was just wandering if it is possible to use a brute force attack on a ssh password(the victims password) on the mac terminal
Thanks
fixer1234closed as too broad by random♦Dec 19 '16 at 5:53
Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.
1 Answer
As @fixer1234 implied, it could be possible depending on the settings of SSH, how weak the password is and how vigilant the intended victim is, but its not likely.
There are a large number of ways of frustrating SSH Brute force attacks, including by eliminating passwords altogether (and preferring public keys, in which case, unless you have access to the multiverse and god-like control of time, you are SOL), refusing root logins, only allowing logins from given IP's - or even different given IP's for different users, banning IP's attempts after a few tries etc.
If you have access to the victims system aleady, and have the shadow file (ie hash of the password), your chances are a lot better as you are not constrained by network limitations, and can throw a lot more CPU at the problem - in which case, depending on his password this falls into the realm of practical in many, but not all cases.
davidgodavidgo