Tech Directions
The video Showing how to break root password in RHEL7. What are the different methods of shutdown or poweroff the RHEL7 machine. Difference between systemctl suspend and systemctl hibernate. How to manage swap file in RHEL7.
Breaking Root Password-Shutdown Modes & Controlling Swap file in RHEL7
The video Showing how to break root password in RHEL7. What are the different methods of shutdown or poweroff the RHEL7 machine. Difference between systemctl suspend and systemctl hibernate. How to manage swap file in RHEL7.
Different Types of Hashes and Salts
Ok, firstly alot of you still believe that hashes can be "decrypted", this is a common misconception because hashes are generated by One Way Cryptographic Hash Algorithms these means the algorithm that created them CAN NOT be reversed to determine the plain text password.
These one way functions are used by computers to prevent storing passwords in plain text in memory, instead when a password is entered (for example at a log in screen) a one way hash algorithm is applied to the supplied password and then the hashed output is compared to the hash for that user, stored in memory. If the two hashes match, the passwords are the same and the user is authenticated, if the two hashes are not the same the passwords do not match and the user is denied access.
MD5 - The most common hash you will come across in the wild is an MD5 hash (Message-Digest algorithm)
These hashes are easily identified by the following factors:
- They are always 32 characters in length (128 Bits)
- They are always hexadecimal (Only use characters 0-9 and A-F)
Code:
Example - f5d1278e8109edd94e1e4197e04873b9
If the hash breaks one of these rules - IT IS NOT MD5.
SHA1 - Still used frequently on the internet and is one of a large family of Secure Hash Algorithms.
These hashes are easily identified by the following factors:
- They are always 40 Characters in length (160 bits)
- They are always hexadecimal (Only use characters 0-9 and A-F)
Code:
Example - ab4d8d2a5f480a137067da17100271cd176607a1If the hash breaks one of these rules - IT IS NOT SHA1.
MySQL < 4.1 - These aren't used very often but still come up on very often because people have no idea what to do with them, they are used in older versions of Mysql.
These hashes are easily identified by the following factors
- They are always 16 Characters in length (64 bits)
- They are always hexadecimal (Only use characters 0-9 and A-F)
Code:
Example - 606727496645bcba
MYSQL5 - Used in newer versions of MYSQL to store database user passwords.
These hashes are easily identified by the following factors
- They are always 41 characters in length
- They are always capitalized
- They always begin with an asterisk
Code:
Example - *C8EB599B8E8EE7BE9F1A5691B7BC9ECCB8DE1C75
MD5(Wordpress) - Used in word press driven sites, one of the most commonly confused hashes by everyone
These Hashes are easily identified by the following factors
- They always start with $P$
- They are always variable case alpha numeric (0-9 A-Z a-z)
- The are always 34 characters long
If the hash breaks one of these rules - IT IS NOT MD5(Wordpress).
Code:
Example - $P$9QGUsR07ob2qNMbmSCRh3Moi6ehJZR1
MD5(phpBB3) - Used in PHPBB forums, another commonly miss identified hash, especially amongst skids.
These Hashes are easily identified by the following factors
- They always start with $H$
- They are always variable case alpha numeric (0-9 A-Z a-z)
- The are always 34 characters long
Code:
Example - $H$9xAbu5SruQM5WvBldAnS46kQMEw2EQ0
SALTS
Ok now there is ALOT of confusion around salts , so im going to try and quickly clean this up - the most commonly salted hash is MD5 because it is cryptographically weak and easy to crack. So a salt gets added to the password before hashing to increase the parity. For example MD5($password.$salt).
Salted MD5 - Used in a large amount of applications to increase hash parity and to increase the time it takes to crack.
These Hashes are easily identified by the following factors
- They consist of two blocks connected by a colon, the first is the hash the second is the salt.
- The first part of the salted hash is hexadecimal, the second is variable case alphanumeric.
- They first part will always be 32 characters long
- The second part can be any length.
Code:
Example - 49adee90123f8c77d9020bba968c34dd:PS2enWarning - in some cases the salt can contain symbols (but this is rare)
NOTE - You need both the salt AND the hash to decrypt a salted md5.
How To Crack Hashes
MD5 - MD5 hashes are easily broken in the present day due to the prevalence of online MD5 crackers such as www.hashchecker.de. However if you cant crack your hash online then you will need to use a tool such as John The Ripper or more advanced hash crackers such as Password Pro or HashCat.
Worlds Fastest MD5 Hash Cracker [BarsWF]
The MD5 Message-Digest Algorithm is a widely used cryptographic hash function that produces a 128-bit (16-byte) hash value, Md5 is an encryption that cannot be reversed, the only successful way to find out the content of a md5 hash, is by running a Brute force Attack.
Barswf is a program designed to crack md5 hashes. It combines old with newer CUDA technologies. So, it uses your graphical card and if available, multiple cores to manage the cracking of md5 hashes. It's considered to be the fasted Md5 Hash cracking tool available.
System Requirements
- CUDA version only:nVidia GeForce 8xxx and up, at least 256mb of video memory.
- LATEST nVidia-driver with CUDA support.Standard drivers might be a bit older (as CUDA 2.0 is still beta)
- CPU with SSE2 support (P4, Core2Duo, Athlon64, Sempron64, Phenom).
- Recommended 64-bit OS (WinXP 64 or Vista64). 32-bit version is also available.
Download
AMD BROOK Beta 0.9:
BarsWF Brook x64
BarsWF Brook x32
CUDA 0.B:
BarsWF CUDA x64
BarsWF CUDA x32
SSE2:
BarsWF SSE x64
BarsWF SSE x32
Hack Windows Password Using Ophcrack
Ever wanted to login to your friends/schools computer which is password protected or you’ve lost your Windows password and you've logged out of your computer. If you are in one of these situations you can use Ophcrack to hack/recover your passwords .In this tutorial i will Explain how to hack windows password using Ophcrack
Things we Need :-
1. Ophcrack Live cd or Flash drive .You can download it from Here
Things we Need :-
1. Ophcrack Live cd or Flash drive .You can download it from Here
Note :-If u don't know how to make Ophcrack Live CD /Usb you can have look at my previous Tutorial from Here
Steps :-
1. First plug in your Ophcrack Live cd/usb .Now restart your computer and go to boot menu by pressing ( f12 or del key ) now select your booting device as CD/USB accordingly
2. Now You will be presented with the Ophcrack LiveCD menu. Leave the default selected and hit enter on your keyboard (or just wait 5 seconds for it to automatically boot).
1. First plug in your Ophcrack Live cd/usb .Now restart your computer and go to boot menu by pressing ( f12 or del key ) now select your booting device as CD/USB accordingly
2. Now You will be presented with the Ophcrack LiveCD menu. Leave the default selected and hit enter on your keyboard (or just wait 5 seconds for it to automatically boot).
3. Slax, the version of Linux that is packaged with Ophcrack, will start up
4. Ophcrack will start on its own, and the passwords for each of your Windows users will be cracked and displayed on screen.
5. Write down the passwords, remove the CD from your CD/Usb and restart your computer. Now you can log in to Windows .
By this way we are able to hack/recover windows Password .I hope you liked the post if you have any doubts please be free to comment
By this way we are able to hack/recover windows Password .I hope you liked the post if you have any doubts please be free to comment
Best Password Cracking Tools
Cain and Abel :- The top password recovery tool for Windows. This Windows-only password recovery tool handles an enormous variety of tasks. It can recover passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, revealing password boxes, uncovering cached passwords and analyzing routing protocols.
John the Ripper :- A powerful, flexible, and fast multi-platform password hash cracker. John the Ripper is a fast password cracker, currently available for many flavors of Unix, DOS, Win32, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. It supports several crypt(3) password hash types which are most commonly found on various Unix flavors, as well as Kerberos AFS and Windows NT/2000/XP LM hashes. Several other hash types are added with contributed patches.
THC Hydra :- A Fast network authentication cracker which support many different services. When you need to brute force crack a remote authentication service, Hydra is often the tool of choice. It can perform rapid dictionary attacks against more then 30 protocols, including telnet, ftp, http, https, smb, several databases, and much more.
L0phtcrack :- Windows password auditing and recovery application
Pwdump :- Windows password recovery tool.
Pwdump is able to extract NTLM and LanMan hashes from a Windows target, regardless of whether Syskey is enabled. It is also capable of displaying password histories if they are available. It outputs the data in L0phtcrack-compatible form, and can write to an output file.
RainbowCrack :- An Innovative Password Hash Cracker.
The RainbowCrack tool is a hash cracker that makes use of a large-scale time-memory trade-off. A traditional brute force cracker tries all possible plaintexts one by one, which can be time consuming for complex passwords. RainbowCrack uses a time-memory trade-off to do all the cracking-time computation in advance and store the results in so-called "rainbow tables". It does take a long time to precompute the tables but RainbowCrack can be hundreds of times faster than a brute force cracker once the precomputation is finished.
Brutus :- A network brute-force authentication cracker
This Windows-only cracker bangs against network services of remote systems trying to guess passwords by using a dictionary and permutations thereof. It supports HTTP, POP3, FTP, SMB, TELNET, IMAP, NTP, and more.
 |
| Download:- http://www.oxid.it/cain.html |
John the Ripper :- A powerful, flexible, and fast multi-platform password hash cracker. John the Ripper is a fast password cracker, currently available for many flavors of Unix, DOS, Win32, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. It supports several crypt(3) password hash types which are most commonly found on various Unix flavors, as well as Kerberos AFS and Windows NT/2000/XP LM hashes. Several other hash types are added with contributed patches.
 |
| Download:- http://www.openwall.com/john/ |
THC Hydra :- A Fast network authentication cracker which support many different services. When you need to brute force crack a remote authentication service, Hydra is often the tool of choice. It can perform rapid dictionary attacks against more then 30 protocols, including telnet, ftp, http, https, smb, several databases, and much more.
 |
| Download:- http://freeworld.thc.org/thc-hydra/ |
L0phtcrack :- Windows password auditing and recovery application
L0phtCrack, also known as LC5, attempts to crack Windows passwords from hashes which it can obtain (given proper access) from stand-alone Windows NT/2000 workstations, networked servers, primary domain controllers, or Active Directory. In some cases it can sniff the hashes off the wire. It also has numerous methods of generating password guesses (dictionary, brute force, etc).
 |
| Download:- http://download.insecure.org/stf/lc5-setup.exe http://download.insecure.org/stf/lc5-crack.zip (keygen) |
Pwdump :- Windows password recovery tool.
Pwdump is able to extract NTLM and LanMan hashes from a Windows target, regardless of whether Syskey is enabled. It is also capable of displaying password histories if they are available. It outputs the data in L0phtcrack-compatible form, and can write to an output file.
RainbowCrack :- An Innovative Password Hash Cracker.
The RainbowCrack tool is a hash cracker that makes use of a large-scale time-memory trade-off. A traditional brute force cracker tries all possible plaintexts one by one, which can be time consuming for complex passwords. RainbowCrack uses a time-memory trade-off to do all the cracking-time computation in advance and store the results in so-called "rainbow tables". It does take a long time to precompute the tables but RainbowCrack can be hundreds of times faster than a brute force cracker once the precomputation is finished.
Download:- http://www.antsight.com/zsl/rainbowcrack/
Brutus :- A network brute-force authentication cracker
This Windows-only cracker bangs against network services of remote systems trying to guess passwords by using a dictionary and permutations thereof. It supports HTTP, POP3, FTP, SMB, TELNET, IMAP, NTP, and more.
Windows Password Cracker [Ophcrack]
Ophcrack is a free Windows password cracker based on rainbow tables. It is a very efficient implementation of rainbow tables done by the inventors of the method. It comes with a Graphical User Interface and runs on multiple platforms.
 |
| Download : Ophcrack |
Features:
- Runs on Windows, Linux/Unix, Mac OS X, ...
- Cracks LM and NTLM hashes.
- Free tables available for Windows XP and Vista.
- Brute-force module for simple passwords.
- Audit mode and CSV export.
- Real-time graphs to analyze the passwords.
- LiveCD available to simplify the cracking.
- Loads hashes from encrypted SAM recovered from a Windows partition, Vista included.
- Free and open source software (GPL).
Creating a bootable Ophcrack flash drive:
In the following tutorial, I will explain how to create an All In One USB Ophcrack Flash Drive. which can be used to recover, reveal or crack both Windows XP and Windows Vista login passwords.
In the following tutorial, I will explain how to create an All In One USB Ophcrack Flash Drive. which can be used to recover, reveal or crack both Windows XP and Windows Vista login passwords.
- First download the Ophcrack XP Live CD ISO form the above link
- Insert your USB Flash Drive
- Download and run Universal USB Installer, select OphCrack XP, and follow the onscreen instructions
- Create a folder named vista_free inside the tables folder on your USB Flash Drive
- Download and unzip the tables_vista_free. zip to the tables/vista_free folder on your USB Flash Drive
- Reboot your PC and set your system to boot from the USB device
Hope this information helps you .In my next tutorial I will explain How to Hack windows password using Ophcrack Live CD/USB .
What is John the Ripper?
John the Ripper is a fastest and Best Password Cracking software. It is compatible with many flavours of Unix, Windows, DOS, BeOS, and OpenVMS.
Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix systems, supported out of the box are Windows LM hashes, plus many more with contributed patches
Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix systems, supported out of the box are Windows LM hashes, plus many more with contributed patches
Info about John The Ripper:
- It is command Line Password Cracker(Don't worry , i will guide how to use John the Ripper?).
- John The Ripper is available for free
- JohnTheRipper is pre Installed in Backtrack Linux
- You can download it for other Linux Versions or any other operating system(Eg:windows xp).
- Supports Both Brute Force and Dictionary Attack Methods
- Fast and Best password Cracker.
Download John The Ripper:
http://www.openwall.com/john/
Articles About John The Ripper:
Install John The Ripper on Linux and Windows
Articles About John The Ripper:
Install John The Ripper on Linux and Windows
