Cracking keepass file

It simply tells you, if a database-passphrase was right or wrong. Currently, the only platform dependend code is implemented in three functions in crypto-ms. It should be no issue to implement a platform independent openssl-based version of crypto-ms. You can get in touch with me e. Skip to content.

Star KeePass 2 database master-password cracker 76 stars 17 forks. Branches Tags. Could not load branches. Could not load tags. Latest commit. Thorsten Schroeder Fixed tabs vs spaces and line endings. Fixed tabs vs spaces and line endings. Git stats 2 commits. This is basically a file with all command passwords we hold against the hash to see if it is correct. On Kali Linux, we already have those dictionary files.

First, we need to open the hash file we have created and remove the name of the database so hashcat can handle the hash file. You can also use a dictionary file with hashcat but in this example, I want to show you a way you do not need a dictionary.

Bear in mind this takes a very long time to crack as it will go by all combinations. We will use the mask option in Hashcat. This takes a very long time because the password is 9 characters and I do not have this much hashing power. If you have multiple Nvidia cards you might give it a try. It is not impossible. And this is even without special characters.

For now, I have created a second Database file to show you that it works. This file has got a 3 character password. As you can see it is very easy to crack the Keepass file once in the hand of a hacker.

I store my passwords in LastPass. This is an online password manager. If you hit the correct one you are done. So you don't really need 50million years. And you have a lot more options than using 2 quadcore PCs.

Of course this is expensive but you don't need to buy HighEnd Computer so it decrease the price dramaticly. But i don't know how long you will bruteforce that by using a Cluster. And of course you are rigt that is takes long time for a normal PC today.

Sign up to join this community. The best answers are voted up and rise to the top. Stack Overflow for Teams — Collaborate and share knowledge with a private group. Create a free Team What is Teams? Learn more. How difficult to crack keepass master password?

Ask Question. Asked 10 years, 2 months ago. Active 8 years, 1 month ago. Viewed k times. Is this a serious threat, or would a brute force attack require massive computing time? Improve this question. If you're really paranoid, you could drop the.

Hauri In a sense, putting the KDBX file into a TrueCrypt volume is putting your eggs into more than one basket - in this case though, the baskets are inside each other. See this recent article; someone was able to make use of Hashcat, along with their GPU, to crack a kee-pass DB in just 12 minutes. Full guide included for your own tests: rubydevices. Hashes can always be broken, more or less, given enough time and computing power.