{"id":145,"date":"2025-11-24T02:02:13","date_gmt":"2025-11-24T02:02:13","guid":{"rendered":"https:\/\/sites.wp.odu.edu\/carterhendrick-eportfolio\/?p=145"},"modified":"2025-11-24T02:02:19","modified_gmt":"2025-11-24T02:02:19","slug":"cyse-301-assignment-5-password-cracking","status":"publish","type":"post","link":"https:\/\/sites.wp.odu.edu\/carterhendrick-eportfolio\/2025\/11\/24\/cyse-301-assignment-5-password-cracking\/","title":{"rendered":"CYSE 301 Assignment 5: Password Cracking"},"content":{"rendered":"\n

Assignment 5<\/p>\n\n\n\n

CYSE 301<\/p>\n\n\n\n

Carter Hendrick<\/p>\n\n\n\n

Task A: Linux Password Cracking (25 points)<\/p>\n\n\n\n

1. 5 points. Create two groups, one is cyse301, and the other is your ODU Midas ID (for example, svatsa). Then display the corresponding group IDs.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

2. 5 points. Create and assign three users to each group. Display related UID and GID information of each user.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

3. 5 points. Choose Three new passwords, from easy to hard, and assign them to the users you<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Alice Password = password<\/p>\n\n\n\n

Bob Password = LocalC0nnection<\/p>\n\n\n\n

Charlie Password = 3nteral2aftey!<\/p>\n\n\n\n

created. You need to show me the password you selected in your report, and DO NOT use your real-world passwords.<\/p>\n\n\n\n

4. 5 points. Export all Three users\u2019 password hashes into a file named \u201cYourMIDAS-HASH\u201d (for example, svatsa-HASH). Then launch a dictionary attack to crack the passwords. You MUST crack at least one password in order to complete this assignment.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

Task B: Windows Password Cracking (25 points)<\/p>\n\n\n\n

Log on to Windows 7 VM and establish a reverse shell connection with the admin privilege to the target Windows 7 VM. Then, create a list of 3 users with different passwords. [10 Points]<\/p>\n\n\n\n

Now, complete the following tasks in sequence:<\/p>\n\n\n\n

    \n
  1. 5 points. Display the password hashes by using the \u201chashdump\u201d command in the meterpreter shell.<\/li>\n<\/ol>\n\n\n\n
    \"\"<\/figure>\n\n\n\n

    2. 10 points. Save the password hashes into a file named \u201cyour_midas.WinHASH\u201d in Kali Linux<\/p>\n\n\n\n

    (you need to replace the \u201cyour_midas\u201d with your university MIDAS). Then run John the ripper<\/p>\n\n\n\n

    for 10 minutes to crack the passwords (You MUST crack at least one password in order to<\/p>\n\n\n\n

    complete this assignment.).<\/p>\n\n\n\n

    \"\"<\/figure>\n\n\n\n

    Task C: 20 points<\/p>\n\n\n\n

    Follow the steps in the lab manual, and practice cracking practice for WEP and WPA\/WPA2 protected traffic.<\/p>\n\n\n\n

      \n
    1. Decrypt the lab5wep-demo. cap file (5 points) and perform a detailed traffic analysis (5 points)<\/li>\n<\/ol>\n\n\n\n
      \"\"<\/figure>\n\n\n\n
        \n
      1. Decrypt the lab5wpa2-demo. cap file (5 points) and perform a detailed traffic analysis (5 points)<\/li>\n<\/ol>\n\n\n\n
        \"\"<\/figure>\n\n\n\n
        \"\"<\/figure>\n\n\n\n

        Task D: 30 points<\/p>\n\n\n\n

        Each student will be assigned a new WPA2 traffic file for analysis. You need to refer to the table below and find the file assigned to you based on the LAST digit of the MD5 of your MIDAS ID. For example, the last digit of the hash for svatsa is 8. Thus, I should pick up the file “WPA2-P3-01.cap.”<\/p>\n\n\n\n

        MD5 of svatsa is fe2943715a4e07c670b242559f5974f8<\/p>\n\n\n\n

        You can find an online MD5 hash generator or the following command to get the hash of a text string,<\/p>\n\n\n\n

        \u2022 The above files are zipped in a folder named “Lab Resources (2023 Spring).” You can locate the zipped folder in your VMshare in any Kali Linux VM. Then, extract the zipped file and find the assigned WPA file under the sub-folder<\/p>\n\n\n\n

        “WPA traffic.”<\/p>\n\n\n\n

        \u2022 Please note that – it is recommended to copy the zip file to your local folder before extracting the<\/p>\n\n\n\n

        whole file in the VMshare folder. Figure 1 Location of Lab Resource (2023 Spring) in the VMshare folder.<\/p>\n\n\n\n

        Last digit of your MD5 Filename<\/p>\n\n\n\n

        0~3 WPA2-P1-01.cap<\/p>\n\n\n\n

        4~5 WPA2-P2-01.cap<\/p>\n\n\n\n

        6~8 WPA2-P3-01.cap<\/p>\n\n\n\n

        9~B WPA2-P4-01.cap<\/p>\n\n\n\n

        C~F WPA2-P5-01.cap<\/p>\n\n\n\n

        Figure 2 I copied the zip file to the Desktop and then extracted it to access the WPA traffic folder.<\/p>\n\n\n\n

        Then complete the following steps:<\/p>\n\n\n\n

          \n
        1. Implement a dictionary attack and decrypt the traffic using the correct file based on your last character of md5 hash for your midas name. – 20 points<\/li>\n<\/ol>\n\n\n\n
          \"\"<\/figure>\n\n\n\n
            \n
          1. Decrypt the encrypted traffic and write a detailed summary to describe what you have explored from this encrypted traffic file (using wireshark). -10 points<\/li>\n<\/ol>\n\n\n\n
            \"\"<\/figure>\n\n\n\n
            \"\"<\/figure>\n","protected":false},"excerpt":{"rendered":"

            Assignment 5 CYSE 301 Carter Hendrick Task A: Linux Password Cracking (25 points) 1. 5 points. Create two groups, one is cyse301, and the other is your ODU Midas ID (for example, svatsa). Then display the corresponding group IDs. 2. 5 points. Create and assign three users to each group. Display related UID and GID … <\/p>\n

            Continue reading<\/a><\/p>\n","protected":false},"author":25850,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wds_primary_category":0},"categories":[8],"tags":[],"_links":{"self":[{"href":"https:\/\/sites.wp.odu.edu\/carterhendrick-eportfolio\/wp-json\/wp\/v2\/posts\/145"}],"collection":[{"href":"https:\/\/sites.wp.odu.edu\/carterhendrick-eportfolio\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sites.wp.odu.edu\/carterhendrick-eportfolio\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/carterhendrick-eportfolio\/wp-json\/wp\/v2\/users\/25850"}],"replies":[{"embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/carterhendrick-eportfolio\/wp-json\/wp\/v2\/comments?post=145"}],"version-history":[{"count":1,"href":"https:\/\/sites.wp.odu.edu\/carterhendrick-eportfolio\/wp-json\/wp\/v2\/posts\/145\/revisions"}],"predecessor-version":[{"id":162,"href":"https:\/\/sites.wp.odu.edu\/carterhendrick-eportfolio\/wp-json\/wp\/v2\/posts\/145\/revisions\/162"}],"wp:attachment":[{"href":"https:\/\/sites.wp.odu.edu\/carterhendrick-eportfolio\/wp-json\/wp\/v2\/media?parent=145"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/carterhendrick-eportfolio\/wp-json\/wp\/v2\/categories?post=145"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sites.wp.odu.edu\/carterhendrick-eportfolio\/wp-json\/wp\/v2\/tags?post=145"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}