So, I've Been Reading and Watching Vids on the Net, but There Is One Thing That Bugs Me - Cracking a Security Question. And I'm Not Only Talking About Facebook and Gmail, I'm Talking About Security Questions in General. So if Somebody Is Able to Throw Some Light on the Tapic I'd Be Really Grateful.
Forum Thread: How to crack a security question?
- Hot
- Active
-
Forum Thread: Changing IP Address 9 Replies
1 day ago -
Forum Thread: When My Kali Linux Finishes Installing (It Is Ready to Boot), and When I Try to Boot It All I Get Is a Black Screen. 8 Replies
1 wk ago -
Forum Thread: HACK ANDROID with KALI USING PORT FORWARDING(portmap.io) 12 Replies
2 wks ago -
Forum Thread: Hydra Syntax Issue Stops After 16 Attempts 2 Replies
1 mo ago -
Forum Thread: Hack Instagram Account Using BruteForce 208 Replies
1 mo ago -
Forum Thread: Metasploit reverse_tcp Handler Problem 47 Replies
3 mo ago -
Forum Thread: How to Train to Be an IT Security Professional (Ethical Hacker) 22 Replies
3 mo ago -
Metasploit Error: Handler Failed to Bind 41 Replies
3 mo ago -
Forum Thread: How to Hack Android Phone Using Same Wifi 21 Replies
3 mo ago -
How to: HACK Android Device with TermuX on Android | Part #1 - Over the Internet [Ultimate Guide] 177 Replies
3 mo ago -
How to: Crack Instagram Passwords Using Instainsane 36 Replies
3 mo ago -
Forum Thread: How to Hack an Android Device Remotely, to Gain Acces to Gmail, Facebook, Twitter and More 5 Replies
3 mo ago -
Forum Thread: How Many Hackers Have Played Watch_Dogs Game Before? 13 Replies
4 mo ago -
Forum Thread: How to Hack an Android Device with Only a Ip Adress 55 Replies
5 mo ago -
How to: Sign the APK File with Embedded Payload (The Ultimate Guide) 10 Replies
5 mo ago -
Forum Thread: How to Run and Install Kali Linux on a Chromebook 18 Replies
5 mo ago -
Forum Thread: How to Find Admin Panel Page of a Website? 13 Replies
6 mo ago -
Forum Thread: can i run kali lenux in windows 10 without reboting my computer 4 Replies
6 mo ago -
Forum Thread: How to Hack School Website 11 Replies
6 mo ago -
Forum Thread: Make a Phishing Page for Harvesting Credentials Yourself 8 Replies
6 mo ago
-
How To: Dox Anyone
-
How To: Crack Shadow Hashes After Getting Root on a Linux System
-
How to Hack Wi-Fi: Getting Started with Terms & Technologies
-
How To: Crack SSH Private Key Passwords with John the Ripper
-
How To: Find Vulnerable Webcams Across the Globe Using Shodan
-
How To: Exploit EternalBlue on Windows Server with Metasploit
-
How To: Crack Password-Protected Microsoft Office Files, Including Word Docs & Excel Spreadsheets
-
Hack Like a Pro: How to Find Directories in Websites Using DirBuster
-
How To: Use Metasploit's WMAP Module to Scan Web Applications for Common Vulnerabilities
-
How To: Gain Complete Control of Any Android Phone with the AhMyth RAT
-
Tutorial: DNS Spoofing
-
Hacking Windows 10: How to Capture & Exfiltrate Screenshots Remotely
-
How To: Use Burp & FoxyProxy to Easily Switch Between Proxy Settings
-
How To: Scan for Vulnerabilities on Any Website Using Nikto
-
How To: Hack Apache Tomcat via Malicious WAR File Upload
-
How To: Check if Your Wireless Network Adapter Supports Monitor Mode & Packet Injection
-
How to Hack Wi-Fi: Stealing Wi-Fi Passwords with an Evil Twin Attack
-
Tutorial: Create Wordlists with Crunch
-
How to Hack Wi-Fi: Cracking WPA2 Passwords Using the New PMKID Hashcat Attack
-
How To: Make Your Own Bad USB
3 Responses
Assuming that your target has answered the Security Question honestly (and I'm a big fan of giving my city of birth as Ulan Bator or somesuch) then social engineering is the key to cracking the answer. SQs tend to follow a similar pattern, despite the fact that many are now moving away from the old "mother's maiden name" format.
When you talk about SQs in general you are throwing the net too wide. I would suggest targeting a specific platform as you can then set up your own bogus account in order to take note of the SQs they ask for.
After that is a question of carrying out recon on your target; befriend them on Facebook, review their Linkedin profile and gather as much publicly available info as possible. If you befriend them on FB and you share similar interests you can strike up chats about innocuous subjects and try and steer them around to areas of interest such as birthdays, places of birth, pets etc.
This is a long term approach that requires significant effort and is unlikely to work on a subject that has any degree of internet security awareness.
its hard to provide you a guide to this, because it also depends a lot on what you are trying to 'crack'. I wouldnt call it cracking, more like bypassing or social engineering at least.
You have to study the companies or website questions, think of flaws, experiment and eventually you might stumble upon a solution to bypass their questions. it is very hard if you ask me, and personally I dont take this method to use because I find it very difficult and time consuming.
Are we talking about CAPTCHA? or " 6 + 7 = "?
You should teach your computer to understand the possible question and then it can answer the question with ease.
Let me know, you might some ML to " crack" this one
/Bytewiz
Share Your Thoughts