hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

Full Version: Serv-upasscrack1.0a
neoragexxx
dunno if i missed something but i can't seem to use it .

i do cscript crack.vbs servupass in cmd while cscript.exe is in same dir and it says PLZ input a ServUPass in the ServUDaemon.ini file .
( where servupass is the pass i wanna crack )
vnet576
QUOTE (MpR @ Oct 25 2003, 04:24 PM)
Is it a virus ? www.google.com good time to learn the code to find out best answered questions are when you learn the answer yourself

I really don't need to here that patronising crap...about use google to study the code to see if its a virus. I asked a simple question and u should give a simple answer. I'm not about to waste my time learning the structures of a lame scripting language that is mainly used for kiddy programs...pfft.
lv4
I don't know if it's any useful, but maybe someone will have a use for this.
ehm
dont use this on ur system on a stro no problem but the crack.vbs that u have to use is a virus: trojan.vbs.rots

so i dont know but i dont use it ^^
dazza
Need to know how it works before i download it
MpR
Remember AV software picks up alot of VBS code as a virus because it recognizes the routines... Not all files your little precious program in the bottom right side of your screen tells you is a virus are virii..

crack.vbs


On Error Resume Next
set OutStreem = wScript.Stdout
set InStreem = wScript.Stdin
If (lcase(right(wScript.Fullname,11)) = "wScript.exe") Then
Set objShell = wScript.CreateObject("wScript.Shell")
objShell.Run("cmd.exe /k Cscript //nologo " & Chr(34) & wScript.ScriptFullName & Chr(34))
Wscript.Quit
End If


PassString = Wscript.Arguments(0)
If Len(PassString)<>34 Then
Usage()
wScript.Echo "PLZ input a ServUPass in the ServUDaemon.ini file."
wScript.Quit
End If

Usage()

Set oMD5 = CreateObject("MD5.WSC")
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set objDictFile = objFSO.OpenTextFile("Dict.txt", 1)
Salt = Left(PassString, 2)
Password = Right(PassString, 32)
Compared()
wScript.Echo "Finished!! Goodluck."
oMD5.Close
objDictFile.Close
objFSO.Close
wScript.Quit


Function Compared()
Do While objDictFile.AtEndOfStream <> True
WordString = objDictFile.ReadLine
Word = Salt & WordString
sHashedStr = oMD5.calcMD5(Word)
If StrComp(sHashedStr, Password)=0 Then
OutStreem.Write "" & Password & "="
OutStreem.Write "" & WordString & Chr(10)
Exit Function
End If
Loop
End Function


Function Usage()
wScript.Echo String(79,"*")
wScript.Echo "Serv-UPassCrack v1.0a"
wScript.Echo "Serv-U FTP PassWord Cracker by Caine, Thanks to Djpower"
wScript.Echo "Usage:"
wScript.Echo "cscript crack.vbs ServUPass"
wScript.Echo "/h: show this usage."
wScript.Echo "CAUTION:!!!!Wordlist must in Dict.txt file!!!!"
wScript.Echo String(79,"*")&vbcrlf
End Function



I dunno lol you tell me

One thing we all need to learn is to depend less on the software you have and to start using the brain to operate the software properly..
vnet576
so is this a virus or isn't it...since i recently reformated and i'm not about to be infected again. BTW...if this is a virus u used an excelent technique of social engineering...most people would do anything for a prog to crack the servu password.
MpR
Is it a virus ? www.google.com good time to learn the code to find out best answered questions are when you learn the answer yourself
SuperG
mad.gif

Of course it's not a virus... Even if you don't know VB you can guess it easily !
If you can't say basically if it is or if it's not ... then don't even use ur brain ! It's so easy to understand... so obvious ...
jubbly
I have never been aware of anything that will decode serv-u passwords and don't think anything will as yet. I may try it to see if i'm proved wrongly, but in my opinion it's just a lamers way of accessing things and an essential tool for kiddies to have fun with.
MpR
patronizing lol nah just saying its sad when people ask a question when they dont look for an answer.. Once again 9/10 of an exploit is research. Why not open your eyes up and take the time to look for something instead of leaning on everyone else for an answer. The code was directly in front of you wouldnt have been hard to take 15 - 20 minutes to google what a certain line does and how its used .. Why bother asking for an answer when you wont take the time to understand ?
vnet576
This isn't an exploit nor am I asking how to do something. All I asked was whether or not someone posted a malicous file. I agree that most questions could be answered with google but I'm not asking how to use this file all I asked was a simple "is this a virus" question before I downloaded it becuz other people mentioned that it was. It would waste more time than it will save by studying the code to find out if it is a virus...and that time I dont' have. Hehe...also if it took 15-20 minutes to fully understand the code thats here...we would all be programers in 20 minutes wouldn't we...

Heres an idea why don't u go and write us a "VB in 20 minutes" book and make us understand...lol. laugh.gif
MpR
What would be the point of writeing a VB in 20 minutes book youd want to use it without understanding it and ask more questions on how to use it ..
IownYou
Its not a virus.
What it does is opening a textfile (dict.txt) and compares the entrys in there to the MD5 entry. So its not decoding but just bruteforcing... Useless
DJVASTVASTY2K
QUOTE (IownYou @ Oct 28 2003, 03:49 PM)
Its not a virus.
What it does is opening a textfile (dict.txt) and compares the entrys in there to the MD5 entry. So its not decoding but just bruteforcing... Useless

IOwnYou

Well SPOTTED M8 wink.gif

Thats Quality Analyseing wink.gif

Best Regards

Adam

Vast Gsm Team

Da Sick Crew
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.