I have a program called NN_BRUTE (Windows Network Neighborhood Password Cracker v3.0)
--------------------------------------------------------------
This is FREEWARE - spread it around as much as you like
Q: What does this program do?
A: It tries to find the password on a shared resource in Windows Network Neighborhood.
Q: What's "name of resource"?
A: "name of resource" is the address of the shared resource you are trying to gain access on. If the computer name is 'Ball' and the shared hard drive is called 'Kjekk', just enter '\\Ball\Kjekk' here (without the quotes).
Q: What's "mapped drive"?
A: If you want to, the program can map the shared resource to a drive. This will ie. make '\\Ball\Kjekk' to, lets say; 'X:'. If you don't want it to map a drive, just leave the edit-box empty.
Q: What should my user name be?
A: It doesn't really matter what you enter as your user name. The default should work quite alright, if not - just enter the user name you used when logging onto the Microsoft Network.
Q: What do I need the list of characters for?
A: If you are going to use the 'Brute Force' method, this will go through the list, trying all possible matches with those characters. The default list has a lot of characters that normally people don't use in their passwords; so you should perhaps check this list and edit it to your preference.
Q: What's "word list"?
A: If you are using the 'Word List' method, you need a file containing a list of words, one word on each line. Such files are to find at
http://www.antionline.com/archives/text/word-lists/ and programs to generate such files can be found at
http://www.anticode.com/. When you have a word-list all set and ready to go, just enter the filename in the "word list" edit-box in the program.
Q: What does "starting point" do?
A: The 'Brute Force' method is very time consuming, and since you are using this program on a Windows box, you might need to reboot for some reason. (I usually reboot 10+ times a day on my Win box) If you would have to start over every time you had to reboot or for some other reason close down this program, you would never get the password. That is why I made a saving feature. (thanks to Emeri1 for giving me the idea) When you hit the 'Abort' button, you are asked if you would like to save your effort so far. The data will be saved into a .ini-file, and the next time you start to crack it will ask you if you want to load the data. Another nice thing to do with this "starting point" feature is that you can crack using several machines, all cracking on the same resource, but with different starting points... This will probably let you find the password a lot faster.
Q: What different does it make if I show the progress or not?
A: While it is nice to see the progress and have some idea of how much you have cracked, it is CPU consuming. If you choose not to see the progress, this will give more power to the actual cracking.
Q: How does this program work?
A: That depends on the method you use. If you choose to try the 'Word List' method, it will start on the first line of the file, try the password and check if it matches. If it does, a message box will appear on your screen telling you so; if not - it will continue to the next line in the file, try the password and check if it matches. This loop will repeat until the password is found or the last line in the file is reached. If that is the case, you should probably get a better word list or use the 'Brute Force' method which I now will explain. The 'Brute Force' method will take an array of characters and try all possible matches. This means that if you have listed all characters that exists, theoretically, you will find the password (sooner or later, anyways
. This method is of course very time consuming, considering it will try ALL possible matches with the characters you have entered. Lets say the password is 4 characters long, and you have entered 'abcdefghijklmnopqrstuvwxyz' as your character list (which is a relatively small list), you could end up with close to 500000 tries, at the worst.
Q: Who's the lamer who made this shitty program? May he burn in hell!
A: Thank you. I, m0nngis of DfG (http://come.to/dfg) made it, and I can be reached by e-mail at mongo@ilovejesus.com... Please don't hesitate to contact me if you have something smart to tell me, such as bug reports etc.
About network-sharing in Windows:
---------------------------------
* The password cannot be more than 8 characters long. So if you are planning on using the 'Word List' method, you should generate a list consisting of words that contains 8 characters and less.
* The password is NOT case-sensitive. This means that 'RoMpE' is the same as 'rompe', and if you should crack this password using the 'Brute Force' method; having a character-list looking like this: 'abcdefghijklmnopqrstuvwxyz' would work just as well as 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ' AND it would save you a lot of time.
Benchmark:
----------
I ran a little benchmark on my machine; a Pentium III 450MHz with 256MB RAM running on Windows 98. The password I used was 'zzzz', a word consisting of 4 characters, all characters the last in the list (which was 'abcdefghijklmnopqrstuvwxyz'). It took 1 hour, 6 minutes and 39 seconds before I had the password, and by that time 475254 different words had been checked. To my knowledge; this means that it tried about 119 passwords per second.
About the 'Brute Force' method:
-------------------------------
If you are going to use the "starting point" feature NOT loading it from the .ini-file, you should probably know some basic stuff about the method. Lets say you enter 'xya' as you starting point, and you are using 'abcdefghijklmnopqrstuvwxyz' as your character list.
xya
yya
zya
aza
bza
cza
dza
eza
fza
gza
hza
iza
jza
kza
lza
mza
nza
oza
pza
qza
rza
sza
tza
uza
vza
wza
xza
yza
zza
aab
bab
cab
As you see, the first character in the word you entered as your starting point is the one which changes most often, then the second character, and so on...
