.

cracking MD5 hash [request tutorial]

<<

tempa

Newbie
Newbie

Posts: 1

Joined: Thu Sep 20, 2007 8:11 pm

Post Thu Sep 20, 2007 8:26 pm

cracking MD5 hash [request tutorial]

hi there:

Well.. my english is not so good.. amm let me try to explaind my self

I'm trying to crack a couple of MD5 hashes the thing is I have used alot of md5 crackers methods [brute force, dictionary, etc] and I'm not getting the desired results...

the hash I'm trying so hard to crack is up to 8 characters, please somebody would tell me how, a method, tutorial?

thanks in advance
<<

jimbob

Post Fri Sep 21, 2007 4:04 am

Re: cracking MD5 hash [request tutorial]

Hi,
There are a few different approaches you can use and you're already mentioned a couple of them.

  • Dictonary attack
This is good for discovering the #low hanging fruit' i.e. the weakest passwords in the stack. A good password cracker will also try variations of the dictionary list e.g. changing case, adding number to the end etc.
  • Brute force/Incremental attack
This method hashes all permutations of a given character set and compares this to the given hash. This can take a long time but will eventually discover the password given enough time. If the password is long and complex it may become infeasible.
  • Rainbow tables
A variation on the brute force attack. A rainbow table is a precomputed set of hashes as opposed to one created at the time of cracking. You simply take your hash can look it up in the table. If it's there you have your password.
[/list]

Recommended tools:
John The Ripper - An excellent password cracker - http://www.openwall.com/john/
RainbowCrack - Rainbow table generator - http://www.antsight.com/zsl/rainbowcrack/
GData - Online MD5 cracker, I've not tested this one - http://gdataonline.com/seekhash.php

You should find plenty of documentation on the web, google is your friend.

Jimbob
<<

venom77

User avatar

Hero Member
Hero Member

Posts: 1905

Joined: Mon Dec 11, 2006 3:23 pm

Post Fri Sep 21, 2007 7:11 am

Re: cracking MD5 hash [request tutorial]

There used to be an online Rainbow Table website, where you could pay for each submission. I can't remember the URL and can't seem to find it atm either. As soon as I come across it I'll post the link (or maybe someone else knows).
<<

don

User avatar

Administrator
Administrator

Posts: 4226

Joined: Sun Aug 28, 2005 10:47 pm

Location: Chicago

Post Fri Sep 21, 2007 3:06 pm

Re: cracking MD5 hash [request tutorial]

CISSP, MCSE, CSTA, Security+ SME
<<

oleDB

User avatar

Recruiters
Recruiters

Posts: 236

Joined: Thu Jul 20, 2006 8:58 am

Location: HOA

Post Fri Sep 21, 2007 3:51 pm

Re: cracking MD5 hash [request tutorial]

The best lightweight, free hash cracker is Ophcrack. The next option for stronger passwords would be either Cain or LC5 with a full RT hash set. You can either generate those tables yourself(6months) or download the torrent. The full set including the <space> is over 60G, so make sure to have a big hard drive. Another great option within Cain that many people ignore is dumping the cached credentials. It requires admin rights, but often the domain accounts used have the same password as the local account.

Return to Tutorials

Who is online

Users browsing this forum: No registered users and 1 guest

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software