{"id":"https://openalex.org/W4416788897","doi":"https://doi.org/10.52167/1609-1817-2025-138-3-187-202","title":"APPLICATION OF HASH CRACKING METHODS IN INFORMATION SECURITY TESTING","display_name":"APPLICATION OF HASH CRACKING METHODS IN INFORMATION SECURITY TESTING","publication_year":2025,"publication_date":"2025-05-20","ids":{"openalex":"https://openalex.org/W4416788897","doi":"https://doi.org/10.52167/1609-1817-2025-138-3-187-202"},"language":"en","primary_location":{"id":"doi:10.52167/1609-1817-2025-138-3-187-202","doi":"https://doi.org/10.52167/1609-1817-2025-138-3-187-202","is_oa":true,"landing_page_url":"https://doi.org/10.52167/1609-1817-2025-138-3-187-202","pdf_url":"https://vestnik.alt.edu.kz/index.php/journal/article/download/2672/1628","source":{"id":"https://openalex.org/S4210207685","display_name":"\u0412\u0435\u0441\u0442\u043d\u0438\u043a \u041a\u0430\u0437\u0410\u0422\u041a","issn_l":"1609-1817","issn":["1609-1817","2790-5802"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4387930291","host_organization_name":"Mukhametzhan Tynyshbayev ALT University","host_organization_lineage":["https://openalex.org/I4387930291"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"\u0412\u0435\u0441\u0442\u043d\u0438\u043a \u041a\u0430\u0437\u0410\u0422\u041a","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://vestnik.alt.edu.kz/index.php/journal/article/download/2672/1628","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5017106323","display_name":"Aigulim Bayegizova","orcid":"https://orcid.org/0000-0003-2293-2143","observed_orcids":["https://orcid.org/0000-0003-2293-2143"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Aigulim Baegizova","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093613790","display_name":"Ainur Jumagaliyeva","orcid":"https://orcid.org/0000-0001-8632-5209","observed_orcids":["https://orcid.org/0000-0001-8632-5209"]},"institutions":[{"id":"https://openalex.org/I4210162802","display_name":"Kazakh Technology and Business University named after K.Kulazhanov","ror":"https://ror.org/054r9x893","country_code":"KZ","type":"education","lineage":["https://openalex.org/I4210162802"]}],"countries":["KZ"],"is_corresponding":false,"raw_author_name":"Ainur Jumagaliyeva","raw_affiliation_strings":["K. Kulazhanov Kazakh University of Technology and Business , Astana , Kazakhstan"],"raw_orcid":"https://orcid.org/0000-0001-8632-5209","affiliations":[{"raw_affiliation_string":"K. Kulazhanov Kazakh University of Technology and Business , Astana , Kazakhstan","institution_ids":["https://openalex.org/I4210162802"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028342100","display_name":"\u0415lmira Abdykerimova","orcid":"https://orcid.org/0000-0002-1447-4077","observed_orcids":["https://orcid.org/0000-0002-1447-4077"]},"institutions":[{"id":"https://openalex.org/I4210091087","display_name":"Yessenov University","ror":"https://ror.org/00cae8n39","country_code":"KZ","type":"education","lineage":["https://openalex.org/I4210091087"]}],"countries":["KZ"],"is_corresponding":false,"raw_author_name":"Elmira Abdykerimova","raw_affiliation_strings":["Yessenov University , Aktau , Kazakhstan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Yessenov University , Aktau , Kazakhstan","institution_ids":["https://openalex.org/I4210091087"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070782667","display_name":"Asset Turkmenbayev","orcid":"https://orcid.org/0000-0002-7401-6887","observed_orcids":["https://orcid.org/0000-0002-7401-6887"]},"institutions":[{"id":"https://openalex.org/I4210091087","display_name":"Yessenov University","ror":"https://ror.org/00cae8n39","country_code":"KZ","type":"education","lineage":["https://openalex.org/I4210091087"]}],"countries":["KZ"],"is_corresponding":false,"raw_author_name":"Asset Turkmenbayev","raw_affiliation_strings":["Yessenov University , Aktau , Kazakhstan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Yessenov University , Aktau , Kazakhstan","institution_ids":["https://openalex.org/I4210091087"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5038565298","display_name":"Venera Rystygulova","orcid":"https://orcid.org/0000-0003-3883-5612","observed_orcids":["https://orcid.org/0000-0003-3883-5612"]},"institutions":[{"id":"https://openalex.org/I4210162802","display_name":"Kazakh Technology and Business University named after K.Kulazhanov","ror":"https://ror.org/054r9x893","country_code":"KZ","type":"education","lineage":["https://openalex.org/I4210162802"]}],"countries":["KZ"],"is_corresponding":false,"raw_author_name":"Venera Rystygulova","raw_affiliation_strings":["K. Kulazhanov Kazakh University of Technology and Business , Astana , Kazakhstan"],"raw_orcid":"https://orcid.org/0000-0003-3883-5612","affiliations":[{"raw_affiliation_string":"K. Kulazhanov Kazakh University of Technology and Business , Astana , Kazakhstan","institution_ids":["https://openalex.org/I4210162802"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.22165264,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"138","issue":"3","first_page":"187","last_page":"202"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.7588000297546387,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.7588000297546387,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.15729999542236328,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.02329999953508377,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/password-cracking","display_name":"password cracking","score":0.7260000109672546},{"id":"https://openalex.org/keywords/password-hashing","display_name":"password hashing","score":0.7789999842643738},{"id":"https://openalex.org/keywords/dictionary-attacks","display_name":"dictionary attacks","score":0.7379999756813049},{"id":"https://openalex.org/keywords/brute-force-attacks","display_name":"brute force attacks","score":1.0},{"id":"https://openalex.org/keywords/privilege-escalation","display_name":"privilege escalation","score":0.7839999794960022},{"id":"https://openalex.org/keywords/md5","display_name":"MD5","score":0.7590000033378601},{"id":"https://openalex.org/keywords/sha-256","display_name":"SHA-256","score":0.996999979019165},{"id":"https://openalex.org/keywords/sha-512","display_name":"SHA-512","score":0.9990000128746033},{"id":"https://openalex.org/keywords/bcrypt","display_name":"bcrypt","score":0.8209999799728394},{"id":"https://openalex.org/keywords/argon2","display_name":"Argon2","score":0.996999979019165},{"id":"https://openalex.org/keywords/multi-factor-authentication","display_name":"multi-factor authentication","score":0.9520000219345093},{"id":"https://openalex.org/keywords/penetration-testing","display_name":"penetration testing","score":0.609000027179718},{"id":"https://openalex.org/keywords/unauthorized-access","display_name":"unauthorized access","score":0.6779999732971191}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.8165000081062317},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.777999997138977},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.6988000273704529},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.5767999887466431},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.5131999850273132},{"id":"https://openalex.org/C3847113","wikidata":"https://www.wikidata.org/wiki/Q2746524","display_name":"Password cracking","level":5,"score":0.5044999718666077},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5041000247001648},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.47269999980926514},{"id":"https://openalex.org/C98705547","wikidata":"https://www.wikidata.org/wiki/Q3394687","display_name":"Password policy","level":4,"score":0.42419999837875366},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.41119998693466187},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.3700000047683716},{"id":"https://openalex.org/C113328881","wikidata":"https://www.wikidata.org/wiki/Q599809","display_name":"Dictionary attack","level":3,"score":0.3443000018596649},{"id":"https://openalex.org/C7608002","wikidata":"https://www.wikidata.org/wiki/Q477202","display_name":"Cryptographic hash function","level":3,"score":0.3255000114440918},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.32420000433921814},{"id":"https://openalex.org/C2780814629","wikidata":"https://www.wikidata.org/wiki/Q327353","display_name":"System administrator","level":2,"score":0.3082999885082245},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3077999949455261},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.2930999994277954},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2921000123023987},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.289900004863739},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.2897999882698059},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.2881999909877777},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.2858999967575073},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.28279998898506165},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.27469998598098755},{"id":"https://openalex.org/C131129157","wikidata":"https://www.wikidata.org/wiki/Q1059963","display_name":"Challenge\u2013response authentication","level":4,"score":0.2745000123977661},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.27399998903274536},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.27300000190734863},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.26109999418258667},{"id":"https://openalex.org/C4957475","wikidata":"https://www.wikidata.org/wiki/Q242186","display_name":"S/KEY","level":3,"score":0.25760000944137573},{"id":"https://openalex.org/C141492731","wikidata":"https://www.wikidata.org/wiki/Q1052621","display_name":"Message authentication code","level":3,"score":0.2556999921798706}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.52167/1609-1817-2025-138-3-187-202","doi":"https://doi.org/10.52167/1609-1817-2025-138-3-187-202","is_oa":true,"landing_page_url":"https://doi.org/10.52167/1609-1817-2025-138-3-187-202","pdf_url":"https://vestnik.alt.edu.kz/index.php/journal/article/download/2672/1628","source":{"id":"https://openalex.org/S4210207685","display_name":"\u0412\u0435\u0441\u0442\u043d\u0438\u043a \u041a\u0430\u0437\u0410\u0422\u041a","issn_l":"1609-1817","issn":["1609-1817","2790-5802"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4387930291","host_organization_name":"Mukhametzhan Tynyshbayev ALT University","host_organization_lineage":["https://openalex.org/I4387930291"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"\u0412\u0435\u0441\u0442\u043d\u0438\u043a \u041a\u0430\u0437\u0410\u0422\u041a","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.52167/1609-1817-2025-138-3-187-202","doi":"https://doi.org/10.52167/1609-1817-2025-138-3-187-202","is_oa":true,"landing_page_url":"https://doi.org/10.52167/1609-1817-2025-138-3-187-202","pdf_url":"https://vestnik.alt.edu.kz/index.php/journal/article/download/2672/1628","source":{"id":"https://openalex.org/S4210207685","display_name":"\u0412\u0435\u0441\u0442\u043d\u0438\u043a \u041a\u0430\u0437\u0410\u0422\u041a","issn_l":"1609-1817","issn":["1609-1817","2790-5802"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4387930291","host_organization_name":"Mukhametzhan Tynyshbayev ALT University","host_organization_lineage":["https://openalex.org/I4387930291"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"\u0412\u0435\u0441\u0442\u043d\u0438\u043a \u041a\u0430\u0437\u0410\u0422\u041a","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4416788897.pdf","grobid_xml":"https://content.openalex.org/works/W4416788897.grobid-xml"},"referenced_works_count":12,"referenced_works":["https://openalex.org/W3048939156","https://openalex.org/W3127172626","https://openalex.org/W4283210331","https://openalex.org/W4306822679","https://openalex.org/W4386921336","https://openalex.org/W4388510040","https://openalex.org/W4391021892","https://openalex.org/W4400406809","https://openalex.org/W4404038964","https://openalex.org/W4404149570","https://openalex.org/W4405124030","https://openalex.org/W4407374105"],"related_works":["https://openalex.org/W4417100299","https://openalex.org/W7171680713","https://openalex.org/W3043023509","https://openalex.org/W7155439170","https://openalex.org/W7217074055","https://openalex.org/W7154496778","https://openalex.org/W2811066956","https://openalex.org/W2012021560","https://openalex.org/W7077081317","https://openalex.org/W4408042973"],"abstract_inverted_index":{"The":[0,34,60],"increasing":[1],"reliance":[2],"on":[3,28],"password-based":[4],"authentication":[5,42,133,181],"makes":[6],"cryptographic":[7],"security":[8,30,139,172,182],"a":[9],"critical":[10],"concern":[11],"in":[12,38,188],"modern":[13,189],"cybersecurity.":[14],"This":[15,150],"study":[16,151],"explores":[17],"automated":[18],"hash-cracking":[19],"techniques":[20,89],"and":[21,44,57,64,69,79,84,100,170,183],"privilege":[22,45,87,167],"escalation":[23,88],"attacks,":[24,114],"assessing":[25],"their":[26],"impact":[27],"system":[29],"through":[31],"penetration":[32],"testing.":[33],"research":[35],"examines":[36],"vulnerabilities":[37,176],"password":[39,95,157],"hashing":[40,158],"mechanisms,":[41],"protocols,":[43],"management,":[46,169],"demonstrating":[47],"how":[48],"attackers":[49,136],"exploit":[50],"these":[51,175],"weaknesses":[52],"to":[53,71,112,124,137,142],"gain":[54],"unauthorized":[55,185],"access":[56,168,186],"escalate":[58],"privileges.":[59],"methodology":[61],"includes":[62],"dictionary":[63,113],"brute-force":[65,125],"attacks":[66,126],"using":[67],"Hashcat":[68],"CrackStation":[70],"evaluate":[72],"the":[73,148,153],"feasibility":[74],"of":[75],"breaking":[76],"MD5,":[77],"SHA-256,":[78],"SHA-512":[80],"hashes,":[81],"both":[82],"salted":[83,116],"unsalted.":[85],"Additionally,":[86],"were":[90],"tested":[91],"by":[92],"analyzing":[93],"weak":[94,128],"policies,":[96],"exposed":[97],"SSH":[98],"keys,":[99],"misconfigured":[101],"SUID":[102],"binaries.":[103],"Results":[104],"confirm":[105],"that":[106],"unsalted":[107],"hashes":[108,117],"are":[109,130],"highly":[110],"vulnerable":[111],"while":[115],"provide":[118],"better":[119],"protection":[120],"but":[121],"remain":[122],"susceptible":[123],"if":[127],"passwords":[129],"used.":[131],"Furthermore,":[132],"misconfigurations":[134],"enable":[135],"bypass":[138],"controls,":[140],"leading":[141],"root":[143],"or":[144,163],"administrative":[145],"control":[146],"over":[147],"system.":[149],"highlights":[152],"need":[154],"for":[155,179],"strong":[156],"algorithms":[159],"such":[160],"as":[161],"bcrypt":[162],"Argon2,":[164],"multi-factor":[165],"authentication,":[166],"continuous":[171],"audits.":[173],"Addressing":[174],"is":[177],"essential":[178],"enhancing":[180],"reducing":[184],"risks":[187],"systems.":[190]},"counts_by_year":[],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2025-11-28T00:00:00"}