Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 07-02-2004, 18:56
Numega Softice
 
Posts: n/a
but dont Rainbow crack also offer plugins from MD2, MD4 and RIPEMD160 in addition to NTLM.

Maybe we could have a independant developement for more hash algorithms.
Reply With Quote
  #2  
Old 07-19-2004, 12:13
willcodeforfood
 
Posts: n/a
Rainbow crack algorithm

Quote:
Originally Posted by Numega Softice
but dont Rainbow crack also offer plugins from MD2, MD4 and RIPEMD160 in addition to NTLM.

Maybe we could have a independant developement for more hash algorithms.
The rainbow crack technique may be applied to any hash style authentication. The only issue is the key space and time to compute the initial tables. The source I have seen contains windows passwords, sha1, md5 but also has a spot to plug in your own algorithms. It is downloadable from:

hxxp://www.antsight.com/zsl/rainbowcrack/
search the page for 'Download'

Enjoy
Reply With Quote
  #3  
Old 07-20-2004, 03:07
Mkz Mkz is offline
Friend
 
Join Date: Jan 2002
Posts: 98
Rept. Given: 0
Rept. Rcvd 2 Times in 2 Posts
Thanks Given: 5
Thanks Rcvd at 25 Times in 17 Posts
Mkz Reputation: 2
tbone, I don't know if you accounted for this in your calculations.
Also, this explanation might be useful for the casual reader:

Not all hashes are actually stored in the precomputed tables. For each "initial password", its hash is computed. Then the hash itself is taken as a new password (I think it's adjusted for the valid input chars) and a new hash calculated.
This process repeats a number of times until you have a final hash.
The only thing you store in the table files is the initial and final hash for each of these "chains", which reduces most of the space required. Still you'll end up with 20Gb of data; just imagine all hashes being stored

When cracking, the known hash is transformed with the above process to obtain a list of hashes to form a new chain of the same length as the others. If one of these hashes matches the final hash of any of the stored tables, you have found the chain where it belongs. Then you just have to find the previous hash that chain - that is the password you're seeking
Reply With Quote
  #4  
Old 07-20-2004, 08:47
Kennus
 
Posts: n/a
Thankfully to crack passwords on a windows computer you only have to generate tables with 7 max length characters otherwise it would take forever.
Also there is also a mod for it to allow for computation of MySQL and Cisco PIX Hashes on oxit.it. You can also download a graphical interface if you care to.
There I managed to contribute something
Reply With Quote
  #5  
Old 07-20-2004, 09:08
JMI JMI is offline
Leader
 
Join Date: Jan 2002
Posts: 1,627
Rept. Given: 5
Rept. Rcvd 199 Times in 99 Posts
Thanks Given: 0
Thanks Rcvd at 98 Times in 96 Posts
JMI Reputation: 100-199 JMI Reputation: 100-199
Kennus:

I've deleted your post in the Announcements and News Forum, because you obviously are not reading such posts as the one titled: "where is FTP info?"

http://www.exetools.com/forum/showthread.php?t=4619

or you would already know "why" you can't access the ftp yet.

Regards,
__________________
JMI
Reply With Quote
  #6  
Old 08-04-2004, 22:27
wizkid0109
 
Posts: n/a
There are two real good apps I found. You can take the easy way out and boot with this floppy and reset the administrator password to blank and from there total control. You could also use a sam dump app and with LC4 and it will pretty much crack any password. LophtCrack 4, the name of the floppy i can't remember, but I can post an image of it if needed.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 01:43.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )