hacking contest

hacking exploits security forum
hacking
compliance articles
upgrade backup exec
information security consultant

gman24
Ok the dictionary crack worked perfectly, the other options worked but didn't pause to display. The syntax and logic were correct, but didn't want to work the way it was supposed to.

This version works completly, posted some hashes for you to play with.


Thanx to who mentioned the brute force wasn't working.

The minor bug, on the brute force it still got the pass but didn't pause
till the end of the other loops, word combo had same bug. I fixed both.


This is a three letter word, will crack with dictionary and brute force
quickly.

You can play with this one.

hash
23761cc868de5c54848a7ed1be3675df

Challenge
s9iFTGCgjU6CpW6dU8_6FJlikN9n


And this one, it's two words put together

Hash

dcba0a4e4948d4d785f2e6b663b48c2d

Challenge
pDMo9bKYf1u9gP19mwspuDazYmhk




This update has all the options of the original plus a twelve character
lower case alpha brute force option.


I plan on adding a save session feature so that you can save the
session and continue later since brute force of more than six
characters may take awhile.

This doesn't have a alphanumuric and lower+uppercase brute force

yet, doing the ones that are common and faster to crack first. Lower
case alpha is the fastest brute force.

People don't commonly have more than twelve chars, will include 14
chars in my next one anyways.

Cryptosys hash needs to be installed

Original version

http://www.governmentsecurity.org/forum/in...?showtopic=4793

Any suggestions on what needs to be added? You can always pick
and choose the options you want to run through.

Going to to add:

all number crack, to run right before all lowercase

all lowercase alphanumeric

lower+upercase

lower+uppercase alphanumeric

Hybrid

Session save


After I finish the code I am going to tweak it for speed, then release it.

Edit:

attachment removed, latest version doesn't require cryptosys hash

Scroll down to get the all in one zip file

So what can you use it for

http://www.governmentsecurity.org/forum/in...?showtopic=4838
newbie
cool...
it works
but one question cuz i dont know a lot about md5 hashes
how can i decrypt a hash without a challenge?
gman24
QUOTE (newbie @ Dec 12 2003, 03:11 PM)
cool...
it works
but one question cuz i dont know a lot about md5 hashes
how can i decrypt a hash without a challenge?

There are programs already out there to crack hashes without challenges john the ripper and mdcrack are two.
flame
thanks gman
the 1st example took me 2 seconds to decrypt
the 2nd one have taken longer and consumed much more cpu and ram.
cpu=55%
ram=68,000
cool.gif
nice work mate
gootik
QUOTE (gman24 @ Dec 13 2003, 02:00 AM)
QUOTE (newbie @ Dec 12 2003, 03:11 PM)
cool...
it works
but one question cuz i dont know a lot about md5 hashes
how can i decrypt a hash without a challenge?

There are programs already out there to crack hashes without challenges john the ripper and mdcrack are two.

how can you find hash's challenge?
gman24
QUOTE (gootik @ Dec 13 2003, 07:51 AM)
how can you find hash's challenge?

Sometimes authentication is sent in challenge response pairs.

You find both by sniffing the login procedure.
gman24
Update:

This version doesn't require anything that's not included in the zip(included lc4 dictionary)

No more cryptosys hash.


Just unzip and run.

It's open source, feel free to look at the source at codelinx.

Here is a use for it, among other things.

http://www.governmentsecurity.org/forum/in...?showtopic=4838
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

 
Invision Power Board © 2001-2005 Invision Power Services, Inc.