Notes

<?
set_time_limit(0);
if (!isset($_POST['crack'])) {
echo "World-List:
";
echo "MD5 Hash:
";
echo "Salt:
";
echo "";
$list = $_POST['list'];
$hash = $_POST['hash'];
$salt = $_POST['salt'];
}else{

foreach(file($list) as $line){
$line = str_replace(“n”,””,$line);
$cracked = md5(md5($line).$salt);
if($hash = $cracked){
die(“Salt Broken…

[+]Password = $line
“);

}
}else{
echo “Sorry mate, no payoff today, try another list!”;
}
?>
[Perl] #5
#!/usr/bin/perl
$ver = "01";
$dbgtmr = "1"; #Intervall of showing the current speed + lastpassword in seconds.

if ($dbgtmr<=0){ die “Set dbgtmr to a value >=1 !n”;};
use Digest::MD5 qw(md5_hex);
use Time::HiRes qw(gettimeofday);

if ($ARGV[0]=~”a”) {
$alpha = “abcdefghijklmnopqrstuvwxyz”;}
if ($ARGV[0]=~”A”) {
$alpha = $alpha. “ABCDEFGHIJKLMNOPQRSTUVWXYZ”;}
if ($ARGV[0]=~”d”) {
$alpha = $alpha.”1234567890″;}
if ($ARGV[0]=~”x”) {
$alpha = $alpha. “!”$%&/()=?-.:\*’-_:.;,”;}

if ($alpha eq “” or $ARGV[3] eq “”) {usage();};
if (length($ARGV[3]) != 32) { die “Sorry but it seems that the MD5 is not valid!n”;};

print “Selected charset for attack: ‘$alpha’n”;
print “Going to Crack ‘$ARGV[3]’…n”;

for (my $t=$ARGV[1];$t<=$ARGV[2];$t++){
crack ($t);
}

sub usage{
print “nnMD5 Hash Bruteforce Kit v_$vern”;
print “by unix_chro alias backtrack ([email protected])n”;
print “Member in staff leader:elite-members,ubuntu-hackersnn”;
print “USAGEn”;
print “./md5crack n”;
print ” Charset can be: [aAdx]n”;
print ” a = {‘a’,’b’,’c’,…}n”;
print ” A = {‘A’,’B’,’C’,…}n”;
print ” d = {‘1′,’2′,’3’,…}n”;
print ” x = {‘!’,’”‘,’ ‘,…}n”;
print “EXAMPLE FOR CRACKING A MD5 HASHn”;
print “./md5crack.pl ad 1 3 900150983cd24fb0d6963f7d28e17f72n”;
print ” This example tries to crack the given MD5 with all lowercase Alphas and all digits.n”;
print ” MD5 Kit only tries combinations with a length from 1 and 3 characters.n——-n”;
print “./md5crack.pl aA 3 3 900150983cd24fb0d6963f7d28e17f72n”;
print ” This example tries to crack the given MD5 with all lowercase Alphas and all uppercase Alphas.n”;
print ” MD5 Kit only tries passwords which length is exactly 3 characters.n——-n”;
print “./md5crack.pl aAdx 1 10 900150983cd24fb0d6963f7d28e17f72n”;
print ” This example tries to crack the given MD5 with nearly every character.n”;
print ” MD5 Kit only tries combinations with a length from 1 to 10 characters.n”;
die “Quitting…n”;
}

sub crack{
$CharSet = shift;
@RawString = ();
for (my $i =0;$i<$CharSet;$i++){ $RawString[i] = 0;}
$Start = gettimeofday();
do{
for (my $i =0;$i<$CharSet;$i++){ if ($RawString[$i] > length($alpha)-1){
if ($i==$CharSet-1){
print “Bruteforcing done with $CharSet Chars. No Results.n”;
$cnt=0;
return false;
}
$RawString[$i+1]++;
$RawString[$i]=0;
}
}
################################################## #
$ret = “”;
for (my $i =0;$i<$CharSet;$i++){ $ret = $ret . substr($alpha,$RawString[$i],1);} $hash = md5_hex($ret); $cnt++; $Stop = gettimeofday(); if ($Stop-$Start>$dbgtmr){
$cnt = int($cnt/$dbgtmr);
print “$cnt hashes\second.tLast Pass ‘$ret’n”;
$cnt=0;
$Start = gettimeofday();
}
print “$ARGV[3] != $hash ($ret)n”;
if ($ARGV[3] eq $hash){
die “n**** Password Cracked! => $retn”;
}
################################################## #
#checkhash($CharSet).”n”;

$RawString[0]++;
}while($RawString[$CharSet-1]<length($alpha));
}

sub checkhash{
$CharSet = shift;
$ret = “”;
for (my $i =0;$i<$CharSet;$i++){ $ret = $ret . substr($alpha,$RawString[$i],1);} $hash = md5_hex($ret); $cnt++; $Stop = gettimeofday(); if ($Stop-$Start>$dbgtmr){
$cnt = int($cnt/$dbgtmr);
print “$cnt hashes\second.tLast Pass ‘$ret’n”;
$cnt=0;
$Start = gettimeofday();
}

if ($ARGV[3] eq $hash){
die “n**** Password Cracked! => $retn”;
}

}

[Python] #6
#!/usr/bin/python
#sha1/md5 wordlist brute
#http://sql.parsers.info
#faza02[at]gmail[dot]com

import hashlib

def brutemd():
fil = open(wordlist, ‘a+’).readlines()
for i in range(len(fil)):
md5 = hashlib.md5(fil[i][:-1]).hexdigest()
if md5 == hash:
print hash + ‘:’ + fil[i][:-1]

def brutesha():
fil = open(wordlist, ‘a+’).readlines()
for i in range(len(fil)):
sha = hashlib.sha1(fil[i][:-1]).hexdigest()
if sha == hash:
print hash + ‘:’ + fil[i][:-1]

hash = raw_input(u’hash: ‘)
wordlist = raw_input(‘wordlist: ‘)
if len(hash) == 40:
brutesha()
if len(hash) == 32:
brutemd()

[Perl] wmd5 – MD5 Hash Web Search
#!/usr/bin/php
<!--?php


/*
* Name: wmd5 - MD5 Hash Web Search
* Credits: Charles "real" F. <charlesfol[at]hotmail.fr>
* Date: 25/04/08
*/

$md5loc = array(
array(‘http://www.milw0rm.com/cracker/search.php&#8217;,’hash=’,’
([^<]+)cracked

‘),
array(‘http://gdataonline.com/qkhash.php?mode=txt&hash=&#8217;,”,’([^<]+)

‘),
array(‘http://pepowned.free.fr/?act=&x=52&y=16&md5=&#8217;,”,’Le Plain Text de w{32} est : ([^<]+)‘),
array(‘http://passcracking.ru/index.php&#8217;,’admin=false&admin2=77.php&datafromuser=’,’w{32}([^<]+)’),
array(‘http://md5.rednoize.com/?p&s=md5&_=&q=&#8217;,”,’

([^<]+)
‘),
array(‘http://ice.breaker.free.fr/md5.php?hash=&#8217;,”,’

– ([^<]+)

);

for($k=1;$k<$argc;$k++)
{
$md5 = strtolower($argv[$k]);
for($i=0;$i<sizeof($md5loc);$i++) { $r = crack($md5loc[$i][0],$md5loc[$i][1],$md5loc[$i][2]); if($r) { print “$md5 is $rn”;break; } } } function crack($url,$post,$gex) { global $md5; if($post!=”&&preg_match(“#$gex#”,post(“$url”,”$post$md5″),$res)) return $res[1]; elseif(preg_match(“#$gex#”,get(“$url$md5″),$res)) return $res[1]; return 0; } function post($url,$data,$get=1,$headers=”) { $result = ”; preg_match(“#^http://([^/]+)(/.*)$#i”,$url,$info); $host = $info[1]; $page = $info[2]; $fp = fsockopen($host, 80, &$errno, &$errstr, 30); $req = “POST $page HTTP/1.1rn”; $req .= “Host: $hostrn”; $req .= “User-Agent: Mozilla Firefoxrn”; $req .= $headers; $req .= “Connection: closern”; $req .= “Content-type: application/x-www-form-urlencodedrn”; $req .= “Content-length: “.strlen( $data ).”rn”; $req .= “rn”; $req .= $data.”rn”; fputs($fp,$req); if($get) while(!feof($fp)) $result .= fgets($fp,128); fclose($fp); return $result; } function get($url,$get=1,$headers=”) { $result = ”; $result = ”; $infos = parse_url($url); $host = $infos[‘host’]; $page = $infos[‘path’]; $fp = fsockopen($host, 80, &$errno, &$errstr, 30); $req = “GET $page HTTP/1.1rn”; $req .= “Host: $hostrn”; $req .= “User-Agent: Mozilla Firefoxrn”; $req .= $headers; $req .= “Connection: closernrn”; fputs($fp,$req); if($get) while(!feof($fp)) $result .= fgets($fp,128); fclose($fp); return $result; } ?>