.

[Article]-Tutorial: Rainbow Tables and RainbowCrack

<<

don

User avatar

Administrator
Administrator

Posts: 4226

Joined: Sun Aug 28, 2005 10:47 pm

Location: Chicago

Post Mon Nov 06, 2006 11:58 pm

[Article]-Tutorial: Rainbow Tables and RainbowCrack

Chris has done what amounts to an academic paper on rainbow tables. This impressive article has to be one of the most definitive works on the subject. I hope the readers appreciate the kind of work it takes to bring you this type of content.

Hats off Chris!

Tutorial: Rainbow Tables and RainbowCrack

Don
Last edited by don on Mon Jan 01, 2007 3:38 pm, edited 1 time in total.
CISSP, MCSE, CSTA, Security+ SME
<<

oleDB

User avatar

Recruiters
Recruiters

Posts: 236

Joined: Thu Jul 20, 2006 8:58 am

Location: HOA

Post Tue Nov 07, 2006 10:54 am

Re: [Article]-Tutorial: Rainbow Tables and RainbowCrack

That was a very excellent writeup Chris.

I would also like to mention this tool, which I'm starting to like better then Cain and LC5. It seems to be slightly faster.

http://ophcrack.sourceforge.net/
<<

don

User avatar

Administrator
Administrator

Posts: 4226

Joined: Sun Aug 28, 2005 10:47 pm

Location: Chicago

Post Tue Nov 07, 2006 11:09 am

Re: [Article]-Tutorial: Rainbow Tables and RainbowCrack

I've mentioned this in another post, but it's worth mentioning here. Ophcrack has a live, bootable CD:

Ophcrack Live CD
The Ophcrack LiveCD is a bootable Linux CD-ROM containing ophcrack 2.3 and a set of tables (SSTIC04-10k). It allows for testing the strength of passwords on a Windows machine without having to install anything on it. Just put it into the CD-ROM drive, reboot and it will try to find a Windows partition, extract its SAM and start auditing the passwords.

Getting it
You can download the ISO image from SourceForge mirrors.

Package
You will find ophcrack 2.3 release (source tarball and win32 installer) at the root of the CD-ROM. The tables are located in directory 'ophcrack/10000'. Please feel free to install ophcrack and copy the tables on your harddisk if you want to use ophcrack outside of the LiveCD.


Don

PS - Help get Chris' awesome work noticed by digging this story.
CISSP, MCSE, CSTA, Security+ SME
<<

LSOChris

Post Tue Nov 07, 2006 12:13 pm

Re: [Article]-Tutorial: Rainbow Tables and RainbowCrack

cool, i'll have to check that out, specially if its a bootable ISO
<<

ryan.cartner

User avatar

Newbie
Newbie

Posts: 20

Joined: Tue Aug 15, 2006 12:26 pm

Post Tue Nov 07, 2006 10:59 pm

Re: [Article]-Tutorial: Rainbow Tables and RainbowCrack

Way to go Chris, this just made frontpage digg.com
<<

LSOChris

Post Tue Nov 07, 2006 11:15 pm

Re: [Article]-Tutorial: Rainbow Tables and RainbowCrack

yea!!!!

now i can expect a few more trojans in my email tomorrow i guess...

its worth it though for EH-net and LSO
<<

slimjim100

User avatar

EH-Net Columnist
EH-Net Columnist

Posts: 385

Joined: Wed Nov 08, 2006 12:50 pm

Location: Atlanta

Post Wed Nov 08, 2006 2:57 pm

Re: [Article]-Tutorial: Rainbow Tables and RainbowCrack

Very nice write up! I am one of the founders of www.plain-text.info and I still feel people do not listen to the fact weak passwords is negligence. I do want to add one thing. You explained how NTLM is better and LM (true) and that users should migrate over to NTLM. I agree it's the right way to go but remember to that LM is still around because networks and domains still have Windows 9X & NT PC's on there domains. If you force you domain/LAN to only NTLM you will push out all the older M$ PC's. Anyway nice paper and good luck on you keeping the Trojans out. I just opened a new web site (www.anti-hacker.info) and I get all kinds of kiddies hitting it.

Slimjim100

www.anti-hacker.info
CISSP, CCSE, CCNA, CCAI, Network+, Security+, JNCIA, & MCP
<<

LSOChris

Post Wed Nov 08, 2006 10:59 pm

Re: [Article]-Tutorial: Rainbow Tables and RainbowCrack

hey thanks for the nice comments! and the good point about the 98/NT boxes.

and welcome to EH-net.
<<

p0et

User avatar

Full Member
Full Member

Posts: 197

Joined: Thu Nov 02, 2006 4:38 pm

Location: Victoria, Canada

Post Tue Dec 05, 2006 11:18 am

Re: [Article]-Tutorial: Rainbow Tables and RainbowCrack

last night I thought I'd try to create some rainbow tables.  I followed Chris' tutorial and the one on http://www.antsight.com/zsl/rainbowcrac ... htm.&nbsp;

I didn't see that I should have done "rtgen lm alpha 1 7 0 2100 8000000 all" for my first table, so I did "rtgen lm alpha 1 7 1 2100 8000000 all".  This finished in a few hours and the description I saw for it was:
rtgen lm alpha 1 7 2 2100 8000000 all
hash routine: lm
hash length: 8
plain charset: ABCDEFGHIJKLMNOPQRSTUVWXYZ
plain charset in hex: 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 5
4 55 56 57 58 59 5a
plain length range: 1 - 7
plain charset name: alpha
plain space total: 8353082582
rainbow table index: 1

I then proceeded to "rtgen lm alpha 1 7 2 2100 8000000 all" and the info I saw for this was:
hash routine: lm
hash length: 8
plain charset: ABCDEFGHIJKLMNOPQRSTUVWXYZ
plain charset in hex: 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 5
4 55 56 57 58 59 5a
plain length range: 1 - 7
plain charset name: alpha
plain space total: 8353082582
rainbow table index: 2

These both look quite identical to me.  I thought they would have different plain charsets or am I missing something?

lm alpha 1 7 0 2100 8000000 all is being generated right now...

Thanks.
GCIH, Security+, Network+, A+, MCP, DCSE
<<

slimjim100

User avatar

EH-Net Columnist
EH-Net Columnist

Posts: 385

Joined: Wed Nov 08, 2006 12:50 pm

Location: Atlanta

Post Tue Dec 05, 2006 3:40 pm

Re: [Article]-Tutorial: Rainbow Tables and RainbowCrack

Try to read this http://www.plain-text.info/Rainbowtables_Basics/. Also look at your rainbow table index number.

Slimjim100
CISSP, CCSE, CCNA, CCAI, Network+, Security+, JNCIA, & MCP
<<

p0et

User avatar

Full Member
Full Member

Posts: 197

Joined: Thu Nov 02, 2006 4:38 pm

Location: Victoria, Canada

Post Thu Dec 07, 2006 3:09 pm

Re: [Article]-Tutorial: Rainbow Tables and RainbowCrack

I see that I can either generate my own rainbow tables with the help of the Tutorial on this site or I could download the SSTIC04-10k rainbow table.

What do you guys prefer?  Any benefits to doing it either way?  I just finished generating and sorting my 5 rainbow tables.
GCIH, Security+, Network+, A+, MCP, DCSE
<<

LSOChris

Post Thu Dec 07, 2006 5:28 pm

Re: [Article]-Tutorial: Rainbow Tables and RainbowCrack

i ended up downloading a set from somewhere...dont remember where and i also created my own.  depending on computer speeds it can take a while to generate them (a day or more).  if you can download them for free i would do that, personnally i wouldnt buy anything i can do myself but thats just me.
<<

slimjim100

User avatar

EH-Net Columnist
EH-Net Columnist

Posts: 385

Joined: Wed Nov 08, 2006 12:50 pm

Location: Atlanta

Post Fri Dec 08, 2006 7:32 am

Re: [Article]-Tutorial: Rainbow Tables and RainbowCrack

I made my own back when rainbowcrack was released but I went out and did the team method. If you can find a small group of others that want to help you can just make the scripts and assign them out. My little team was called "Midga.org" (note the domain is now a friends mudding site) but after getting up and running we merged with another group and made plain-text.info and at last count I think we are up to about 2+ terabytes of tables. I would not recommend buying rainbow tables as half the fun is customizing them to fit your needs. I have 250 gig of tables on an external hard drive I keep with me for offline cracking and when I need more power I then move to web based tables.

Slimjim100
CISSP, CCSE, CCNA, CCAI, Network+, Security+, JNCIA, & MCP
<<

p0et

User avatar

Full Member
Full Member

Posts: 197

Joined: Thu Nov 02, 2006 4:38 pm

Location: Victoria, Canada

Post Wed Dec 20, 2006 10:19 pm

Re: [Article]-Tutorial: Rainbow Tables and RainbowCrack

Hey guys,
There was a website I used a little while ago to input a few hashes (individually) and the site's rainbow tables cracked them for me.  I've lost the site though.  You guys know which one that was?

I know the plain-text.info site, but see that you can only input a hash file or something and the results are posted for all to see.  It wasn't that one.

Thanks!
GCIH, Security+, Network+, A+, MCP, DCSE
<<

p0et

User avatar

Full Member
Full Member

Posts: 197

Joined: Thu Nov 02, 2006 4:38 pm

Location: Victoria, Canada

Post Wed Dec 20, 2006 10:37 pm

Re: [Article]-Tutorial: Rainbow Tables and RainbowCrack

GCIH, Security+, Network+, A+, MCP, DCSE
Next

Return to Gates

Who is online

Users browsing this forum: No registered users and 0 guests

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software