Inforensics

A hash is a signature that identifies data, such as a file or message.  It's a one-way mathematical function that turns data into a string of unreadable text that can't be decoded or reversed. What is Hashcat? Hashcat is  a password  cracking  tool used for licit and illicit purposes . Hashat is a particularly fast, efficient, and versatile hacking tool that assists brute-force attacks by conducting them with hash values of passwords that the tool is guessing or applying. To crack a password using Hashcat, follow these steps: 1. Find the hash of the file for which you need to crack the password. 2. Save the hash to a text file. 3. Find or create a dictionary for use in the password-cracking process. 4. Use Hashcat commands to crack the password. There are numerous options available to find a file's hash. In this case, we are using a Python file to obtain the hash of the file.  In this blog post, we will be focusing on finding the password of a Wo...

Installation of Metasploitable 2 OS and Network Setup for Pen-testing What is Metasploitable 2? Metasploitable 2 is  an intentionally vulnerable Ubuntu Linux virtual machine that is designed for testing common vulnerabilities . What are the benefits of Metasploitable?   Metasploitable  makes it easy to practice your scripts and exploits by allowing you to run a localized, vulnerable machine . Customizable: Metasploitable is a modular and customizable operating system, allowing the penetration tester only to use the features they need. Installation of metasploitable 2 First search for rapid7 metasploitable 2(which is official). click on the first link. you will see two links. click on the second link and click on the download option. metasploitable zip file will be downloaded. Right-click on the zip file and click on extract here. All files in the zip file will be extracted into a file named Metasploitable2-Linux. make sure that you have Metasploitable2 virtual ...

 Usefulness of Epoch in Digital Forensics Investigation  (UNIX and MacOS perspective)  In digital forensics investigation, epoch plays an important role in event reconstruction. Hence, we try to provide detailed insight into the UNIX and MAC OS epoch values. An epoch is a date and time that a computer uses to determine the computer's clock and timestamp values. Epoch is sometimes also referred to as epoch time, POSIX time, and Unix time. In simple words, it is the starting point of the operating system that determines a computer’s date and time by counting ticks (seconds/ nanoseconds/picoseconds). Epochs can persist into the file metadata, system files, log files, and other metadata files. The value of epoch varies from operating system (OS) to OS and file system to file system.   The epoch traditionally corresponds to 0 hours, 0 minutes, and 0 seconds Coordinated Universal Time (UTC) on a specific date, which varies from system to system, as the starting date o...