Hello all,

sorry for the inconvinient topic title.

iam not that good at coding...but got a little idea

I suppose we can code a MD5Cracker in the lines of the "Rainbow Crack"

using the time memory tradeoff technique.

any suggestions ideas....



Regards
Onlinepass

If anyone knew how to get something like this started, I'd be willing to participate. Especially for all possible 8 digit alpha-numeric passwords.

It would probably take 5 brand new machines two weeks to do a time-memory tradeoff crack.

You can use the cryptosys libraries so you don't have to worry about writing the md5 algarithm.

Cryptosys has some paticularities, if you have problems with it ask, I have figured out some of them.

This is for c/c++ and visual basic.


The yahoo login page has md5 hash functions In javascript you may be able to convert to C/c++ with a little work.

Edit: When I finsh my md5 + hash cracker and optimize it I will release the code for all to look at. You have to start by seeing if the combos are written to disk (if the file exists) if not, write them to disk. Then compare the hashes.

I have checked the MD5 Function in the yahoo login page....but what i was thinking of is having the idea for the "Time Memory Tradeoff" Technique for MD5...

is it possible?

but since it uses Challenge to decrypt the password...will it be possible to have "Rainbow Tables" or soem generic thing to decrypt all the passwords.

I will search seriously for this...and let you know of my findings.....

and looking forward for some suggestions


Regards,
Onlinepass

Challenge isn't md5 specific, the challenge is only used in one function, the login.

Ya, exclude the challenge. Have the program make the tables using the md5 encryption algorithm.

Hey guys,

After i have posted the idea....i have noticed the Rainbowcrack site....and there it was
rainbowcrack 1.2
which includes MD5 and SHA1 cracker

generate chains for md5 or sha and there u go....

but the thing is that there is no support for customcharsets yet...


Regards,
Onlinepass

here is the rainbowcrack site
http://www.antsight.com/zsl/rainbowcrack/

this file has interesting info about how rainbowcrack works
http://lasecwww.epfl.ch/pub/lasec/doc/Oech03.pdf

love the open source. gonna try to tweak it to crack some serv-u passwords,

i was thinking i might try replace rainbowcrack's MD5 algorithm with the fast one from mdcrack that way it should be a lot faster to generate the tables, but im not sure how long this will take to code

mdcrack website
http://membres.lycos.fr/mdcrack/nsindex2.html