Government Security
Network Security Resources

Jump to content

Photo

Password Cracker Source

- - - - -
  • Please log in to reply
29 replies to this topic

#1 infratrace

infratrace

    Private

  • Members
  • 12 posts

Posted 24 December 2005 - 06:24 AM

Hey,

I wondering if anyone would be able to help out in a source to make a password cracker that once password has cracked it saves he info into a *.txt file.

Thanks

#2 Chris

Chris

    Specialist

  • Sergeant Major
  • 1,203 posts

Posted 24 December 2005 - 08:01 AM

Erm yeah sure

Private Sub Form_load()
dim password as string
password = "b"

dim passno as integer

while succeed <> true
select case passno

case 1
passwordguess = a

case 2
passwordguess = b

case 3....

case 4.....

end select

if passwordguess = password then
msgbox "The password is: " & passwordguess
exit sub
end if

passno = passno + 1
wend

end sub

Please elaborate a little bit next time....

#3 infratrace

infratrace

    Private

  • Members
  • 12 posts

Posted 24 December 2005 - 04:50 PM

Yeah ok, But thats the easy bit, How would you make that program crack a password on PuTty?

#4 Chris

Chris

    Specialist

  • Sergeant Major
  • 1,203 posts

Posted 24 December 2005 - 05:21 PM

I wouldnt,

I would build the telnet (or SSH if your using it) client in VB and then build a password cracker directly onto it, failing that I would use some open source implementation of putty (if putty itself isnt open source) and then build directly on that.

Cheers man, check planet source code for a SSH client in VB and then mix that code with the code above or similar and away you go!

#5 infratrace

infratrace

    Private

  • Members
  • 12 posts

Posted 24 December 2005 - 05:25 PM

ok cheers bro ;)


Watch out for thanks posts, I like to be thanked so thanks for that =) but still one of the other mods may see this as a thanks post and might wack you for it, I dont wanna see that happen so just bung a short sentence on the end saying your next plan of action etc next time.... Thanks man, Merry Christmas - Chris105

Edited by chris105, 24 December 2005 - 05:39 PM.


#6 Chris

Chris

    Specialist

  • Sergeant Major
  • 1,203 posts

Posted 24 December 2005 - 05:36 PM

No worries, good luck, any problems post....

#7 secrou

secrou

    Corporal

  • Members
  • 174 posts

Posted 25 December 2005 - 03:55 AM

hi
where we now talk about pw cracking...
do you know a REALY large list of passwords?
something bigger than 200mb if possible ...
so a direction attack with vb should be possible.
i wanna try to make something like that.

but all keywordlists i found are less than 2k words ....
i need a much bigger one.

do you know where to got such one?
greets
Posted Image

#8 Chris

Chris

    Specialist

  • Sergeant Major
  • 1,203 posts

Posted 25 December 2005 - 12:20 PM

Not a fan of dictionary attacks myself or brute forcing so sorry I cant help out, what I will say is even with a huge wordlist like that the person could be using multiple words or alpha numeric symbol passwords. Most of my passwords are jibberish with numbers and / or symbols in them.

#9 secrou

secrou

    Corporal

  • Members
  • 174 posts

Posted 25 December 2005 - 06:20 PM

Not a fan of dictionary attacks myself or brute forcing so sorry I cant help out, what I will say is even with a huge wordlist like that the person could be using multiple words or alpha numeric symbol passwords. Most of my passwords are jibberish with numbers and / or symbols in them.


mhm oh you gave me an idea ....
i let a programm work during the night by whriting random charakters into a textfile by a len of 3 - 10
thats the start of my dictionary :)

i can post the list tomorrow here if you want to.
i hope i got enough free space on my harddrive ...
Posted Image

#10 infratrace

infratrace

    Private

  • Members
  • 12 posts

Posted 25 December 2005 - 07:55 PM

i can post the list tomorrow here if you want to.
i hope i got enough free space on my harddrive ...



Yeah go for it bro ;)

Edited by Ĩń₣ґдЯǻČ, 25 December 2005 - 07:55 PM.


#11 secrou

secrou

    Corporal

  • Members
  • 174 posts

Posted 25 December 2005 - 08:23 PM

so now i made a small Visual basic application that genarates
1-9 and a-z and A-Z

mixed into random lengh of keywords in the range 3 upto 10 letters.

im now at ..... 600k passwords in a txt file, which is just 50mb big .... but i want my 200mb :D
i let it run during the night.
i wil give you the programm insteat of the list , to give the list would be a bit dificult.

and a hard drive overflow protection is also enabled, at totalspace / 64 its the end ....

so now im at 800k passwords ....


greetz
Posted Image

#12 secrou

secrou

    Corporal

  • Members
  • 174 posts

Posted 26 December 2005 - 04:05 AM

ok here it is:


Dim fso As New FileSystemObject
Private Sub Command1_Click()
On Error Resume Next
Open Text3.Text For Output As #1
i = 1
While 1 < 2
i = i + 1
pass = ""

anz = Int(Rnd * 10) + 3
While Not Len(pass) >= anz
newchr = Chr(Int((122 * Rnd) + 33))
If Asc(newchr) <= 57 And Asc(newchr) >= 48 Or Asc(newchr) <= 91 And Asc(newchr) >= 65 Or Asc(newchr) <= 122 And Asc(newchr) >= 97 Then
pass = pass & newchr
End If
Wend
DoEvents
Label4 = pass
DoEvents
Label1 = i
Print #1, pass
Wend
Close #1


End Sub

Private Sub Timer1_Timer()
 
 
  Dim nSize As Currency
  Dim nFree As Currency
 Dim oDrive As Drive
Set oDrive = fso.GetDrive(Left(App.Path, 2))

  nSize = oDrive.TotalSize
  nFree = oDrive.AvailableSpace
  Label2.Caption = nSize
   Label3.Caption = nFree
   If nFree <= nSize / 64 Then
End
End If
End Sub
you need 1 button,4 labels, 1 timer (500 interval) and 1 textbox, and the windows scripting runtime activated unter referenzes.

in the textbox you type the name of the textfile that will be whirten with passwords.
i now got a 1,8GB textfile full with passwords.
i get problems to open the file :/

greetz

Edited by secrou, 26 December 2005 - 04:09 AM.

Posted Image

#13 cvh

cvh

    Sergeant

  • Members
  • 209 posts

Posted 26 December 2005 - 05:49 AM

hi
where we now talk about pw cracking...
do you know a REALY large list of passwords?
something bigger than 200mb if possible ...
so a direction attack with vb should be possible.
i wanna try to make something like that.

but all keywordlists i found are less than 2k words ....
i need a much bigger one.

do you know where to got such one?
greets


Just look up what rainbow tables are.


http://www.antsight....l/rainbowcrack/ <-- basic info and tools
http://www.plain-text.info/ <-- This is a site from several forum members from GSO *excellent site*

Former security researcher for KAPDA.

http://www.kapda.ir OFFLINE FOREVER
http://www.kapda.net Archived website

Iranian Computer Security Science Researchers Institute.

http://en.wikipedia.org/wiki/KAPDA

Search bugtrack and many other mailing lists for my old advisory's, exploits and 0day's.
Search google with keywords: cvh kapda


#14 Chris

Chris

    Specialist

  • Sergeant Major
  • 1,203 posts

Posted 26 December 2005 - 09:58 AM

Not actually quite like rainbow tables but I suppose its relatively close. Rainbow tables are to do with hashes, the kind of bruteforcing we are talking about here doesnt deal with hashes at all.

#15 cvh

cvh

    Sergeant

  • Members
  • 209 posts

Posted 26 December 2005 - 11:17 AM

Yes indeed my mistake, but I still don't understand why he wants a list, it's faster to generate passwords in real time than reading it from a hard drive. Dictionary files are list which contains the most used passwords, but list from a-z and 10 chars long doesn't make sense, it only slows down the brute forcing process.

Former security researcher for KAPDA.

http://www.kapda.ir OFFLINE FOREVER
http://www.kapda.net Archived website

Iranian Computer Security Science Researchers Institute.

http://en.wikipedia.org/wiki/KAPDA

Search bugtrack and many other mailing lists for my old advisory's, exploits and 0day's.
Search google with keywords: cvh kapda