flat assembler
Message board for the users of flat assembler.

Index > Windows > MD5 Cracking

Goto page 1, 2  Next
Author
Thread Post new topic Reply to topic
johndoe



Joined: 18 Jun 2005
Posts: 8
johndoe
Does anyone have examples of MD5 cracking
i havent actually seen e xamples in FASM
but if someone has sample could would be great
Post 18 Jun 2005, 12:13
View user's profile Send private message Reply with quote
YONG



Joined: 16 Mar 2005
Posts: 8000
Location: 22° 15' N | 114° 10' E
YONG
Check these links:

http://passcracking.com/
- MD5 Online Cracking using Rainbow Tables

http://www.antsight.com/zsl/rainbowcrack/
- Project RainbowCrack

YONG
Post 18 Jun 2005, 13:32
View user's profile Send private message Visit poster's website Reply with quote
Matrix



Joined: 04 Sep 2004
Posts: 1171
Location: Overflow
Matrix
hmm,
do you think it is a good thing to spread something like this?
Post 19 Jun 2005, 00:10
View user's profile Send private message Visit poster's website Reply with quote
r22



Joined: 27 Dec 2004
Posts: 805
r22
If someone uses a smart password then bruteforcing it becomes close to impossible or at least it'll take a foolish amount of time. Although the rainbow method seems to show that it can crack a windows password in a few minutes by precomputing all possible hashes.

No point in not talking about it here as you can easily search google and find even more about it.
All that needs to be said is DON'T crack anything without the permission of the owner.
Post 19 Jun 2005, 23:05
View user's profile Send private message AIM Address Yahoo Messenger Reply with quote
f0dder



Joined: 19 Feb 2004
Posts: 3170
Location: Denmark
f0dder
If you have "the permission of the owner", there's usually better ways to fix windows password problems than bruteforcing md5... unless EFS is involved Smile
Post 20 Jun 2005, 00:26
View user's profile Send private message Visit poster's website Reply with quote
Slimjim100



Joined: 19 Jul 2005
Posts: 1
Slimjim100
Hey Guys I was Googleing MD5 Cracking and found your forum. I'm an Admin at www.plain-text.info and we have been cracking LM, MD5, SH1, ECT... for years now with Rainbow tables and it is very easy to get a group going. We have over 500 gig of tables and are able to crack most MD5 & LM with little issues. The biggest thing is with great power comes responsibility so we have limited Anonymous Hash submission to 2 per hour to avoid major issues on the net. Our goal was to provide rainbow cracking could be done and now we are just having too much fun. All the admin’s of the site are whitehat'ish and don't go running around defacing but we do have the issue of people always asking for tables and trying to hack the server. Our system is distributed cracking so we have client/server software and no tables are on the server so little to the little kiddies knows hacking the server is useless. Our client code is hosted on Member PC's and they have the Rainbow tables on a local hard drive or SAN. I just wanted to make sure you guys know that the tables are out there and there are many group building them now. It's always a good idea to use long passwords with special charters.

Slimjim100
Post 19 Jul 2005, 03:39
View user's profile Send private message Visit poster's website MSN Messenger Reply with quote
MCD



Joined: 21 Aug 2004
Posts: 604
Location: Germany
MCD
It's strange. Most users of this board are either not interested in hash-algorythm cracking at all or only in theory, thus none of us needs such.
Maybe you googled the wrong forum ?
Post 19 Jul 2005, 13:27
View user's profile Send private message Reply with quote
bogdanontanu



Joined: 07 Jan 2004
Posts: 403
Location: Sol. Earth. Europe. Romania. Bucuresti
bogdanontanu
Exactly... we are completly not interested in any form of cracking Very Happy
Post 19 Jul 2005, 17:30
View user's profile Send private message Visit poster's website Reply with quote
vid
Verbosity in development


Joined: 05 Sep 2003
Posts: 7108
Location: Slovakia
vid
bogdanontanu: speak for yourself. Reverse engineering which is often "cracking software" is extremely educational for every assembly programmer.
Publishing those cracks is another question....
Post 19 Jul 2005, 21:14
View user's profile Send private message Visit poster's website AIM Address MSN Messenger ICQ Number Reply with quote
Reverend



Joined: 24 Aug 2004
Posts: 408
Location: Poland
Reverend
vid: I fully agree with you Cool Reverse Engineering is a great source of knowledge and also a bit fun Smile
Post 19 Jul 2005, 23:35
View user's profile Send private message Visit poster's website Reply with quote
bogdanontanu



Joined: 07 Jan 2004
Posts: 403
Location: Sol. Earth. Europe. Romania. Bucuresti
bogdanontanu
Yeah, sorry I was indeed speaking for myself only...

I find no purpose whatsoever into cracking or reverse engineer... there is no real knowledge to gain...

Yeah, there might be some "tricks" in there ... but a trick or two do not make a great programmer...and that is NO real knowledge... it's just "borrowed stuff" since you have not walked the path yourself.

Algorithms, design skills, imagination and creativity do make a great programmer. Easy to understand code does it also (no tricks if possible).

I am quite good at reversing... and I might have had to do it because there was an legal job assignment or there was no oher way arround (very old software bugs)...

But I have learned little from it (appart from useless tricks) and overall I have found little or no joy at all...

I do speak for myself of course... and it is your right to be different.
Post 20 Jul 2005, 11:54
View user's profile Send private message Visit poster's website Reply with quote
comrade



Joined: 16 Jun 2003
Posts: 1137
Location: Russian Federation
comrade
why is this thread under Windows

why are u asking about this at all, password cracking is illegal

who are u
Post 20 Jul 2005, 19:29
View user's profile Send private message Visit poster's website AIM Address Yahoo Messenger MSN Messenger ICQ Number Reply with quote
vid
Verbosity in development


Joined: 05 Sep 2003
Posts: 7108
Location: Slovakia
vid
Quote:
I find no purpose whatsoever into cracking or reverse engineer... there is no real knowledge to gain...
Yeah, there might be some "tricks" in there ... but a trick or two do not make a great programmer...and that is NO real knowledge... it's just "borrowed stuff" since you have not walked the path yourself.

Not true, you get deeper sight into things, find out different techniques you probably wouldn't discover by yourself anyway. And learning from sources / texts is just another way to discover, as good as this one. And you CAN'T discovere everything by yourself, your participation in learning proccess is to judge informations provided to you by any of ways (read text / read code / reverse / others...).

Quote:
Algorithms, design skills, imagination and creativity do make a great programmer. Easy to understand code does it also (no tricks if possible).

Wide range of knowledges does too. And restricting one way of learning doesn't help you in widening your range. And using tricks is design skill just as writing clear understandable code.

Quote:
I am quite good at reversing... and I might have had to do it because there was an legal job assignment or there was no oher way arround (very old software bugs)...
But I have learned little from it (appart from useless tricks) and overall I have found little or no joy at all...

Because your paradigm about reversing only "legal job assignment" apps. If you would revese something worth of reversing you 'd see there are many greater programmers with many ideas you'd never make out by yourself, or at least very hardly.
Post 20 Jul 2005, 22:06
View user's profile Send private message Visit poster's website AIM Address MSN Messenger ICQ Number Reply with quote
xmsx



Joined: 27 Aug 2005
Posts: 1
xmsx
tried this tool for the cracking md5 hash:

http://www.cmho.tk (Cracking Md5 Hash Online)

project open source

Byz

Info:

English topic: http://www.waraxe.us/ftopict-1000.html
Italian topic: http://forumhackerzone.altervista.org/forum/topic=2302.html
Post 27 Aug 2005, 15:38
View user's profile Send private message Reply with quote
The_CodeMaster



Joined: 25 Jul 2005
Posts: 8
The_CodeMaster
Quote:

why are u asking about this at all, password cracking is illegal


Is that so? And what if you forgot your own password???
Post 27 Aug 2005, 16:47
View user's profile Send private message Reply with quote
vbVeryBeginner



Joined: 15 Aug 2004
Posts: 885
Location: \\world\asia\malaysia
vbVeryBeginner
i guess, we could try to implement double level md5

md5(md("my secret string"))

or triple level md5

md5(md5(md5("secret")))

and i personally believe, sooner or later, people would find clash value.
Post 27 Aug 2005, 17:27
View user's profile Send private message Visit poster's website Reply with quote
bogdanontanu



Joined: 07 Jan 2004
Posts: 403
Location: Sol. Earth. Europe. Romania. Bucuresti
bogdanontanu
Quote:

Not true, you get deeper sight into things, find out different techniques you probably wouldn't discover by yourself anyway. And learning from sources / texts is just another way to discover, as good as this one. And you CAN'T discovere everything by yourself, your participation in learning proccess is to judge informations provided to you by any of ways (read text / read code / reverse / others...).


If you do not think about yourself that you can discover everything by yourself (given enough time and resources that is) --> then you are in big trouble. It means that you do not know how to learn.

And this low self esteem is the exact result of basing your knowledge too much on "tricks" learned from others ... instead of concepts and algorithms. Your "participation in learning" is to walk the path yourself (practically or using your imagination) and improve your neural paths in the process...

Yes, you should cross reference with others once in a while BUT is it important that you discovers things yourself because only this generates a better neuronal path ... a thing hummans name "inteligence".

Quote:

Wide range of knowledges does too. And restricting one way of learning doesn't help you in widening your range. And using tricks is design skill just as writing clear understandable code.

Nope, wide range of knowlwdge is just an aspect of a human with good lerning skills ... and not the opposite.

You can aquire a wide range of knowledge but it is pathetically useless (like you memorize all MSDN of SDK or DDK) unles you know how to learn new things.

Knowing how to learn comes first. Wide knowledge is just a by product that comes along but it is never the other way arround.... unles you want to name yourself as an " humman enciclopedia" ... good for circus but useless otherwise...

Things change so fast today in technology that knowing how to learn/understand and grasping concepts is of the essence while knowing a few tricks is on the funny part to talk on a beer.

Quote:

Because your paradigm about reversing only "legal job assignment" apps. If you would revese something worth of reversing you 'd see there are many greater programmers with many ideas you'd never make out by yourself, or at least very hardly.


First of all I would always make anything by myself and preatty easy, not hardly Very Happy Ideas are highly overestimated in this world!

Do not make assumptions on my work area and expertise either...
I can not talk about that because of NDAs but trust me I have reversed a lot of stuff in my life and even last week.

There is no trick that can foul me and a few hours of trace is enough to break any kind of protection... (non-crypto since that takes slightly more time)

However I do not value those skills too much... (but my employer does Razz ) and all of the things I have found inside are thinks I have already known and of very little importance for creation -- but yeah I know that they are annoying...

Working as white hat antiviral, anti-protection, cryptography and military security company's all over the time does ring a bell to you as my level of expertise?

I do not know why on Earth you consider that legal jobs assignments can not involve strong reverse tasks much more stronger that the ones available on the wild free zone Very Happy

Anyway I do value creation even if it involves less tricks...
Somehow it makes my soul much happy to create than to destroy Wink
Post 28 Aug 2005, 14:08
View user's profile Send private message Visit poster's website Reply with quote
comrade



Joined: 16 Jun 2003
Posts: 1137
Location: Russian Federation
comrade
The_CodeMaster wrote:
comrade wrote:

why are u asking about this at all, password cracking is illegal

Is that so? And what if you forgot your own password???


The_CodeMaster, please... seriously

Bogdan, please.... seriously

_________________
comrade (comrade64@live.com; http://comrade.ownz.com/)
Post 28 Aug 2005, 14:33
View user's profile Send private message Visit poster's website AIM Address Yahoo Messenger MSN Messenger ICQ Number Reply with quote
El Tangas



Joined: 11 Oct 2003
Posts: 120
Location: Sunset Empire
El Tangas
bogdanontanu wrote:


First of all I would always make anything by myself and preatty easy, not hardly Very Happy Ideas are highly overestimated in this world!

Do not make assumptions on my work area and expertise either...
I can not talk about that because of NDAs but trust me I have reversed a lot of stuff in my life and even last week.

There is no trick that can foul me and a few hours of trace is enough to break any kind of protection... (non-crypto since that takes slightly more time)

However I do not value those skills too much... (but my employer does Razz ) and all of the things I have found inside are thinks I have already known and of very little importance for creation -- but yeah I know that they are annoying...

Working as white hat antiviral, anti-protection, cryptography and military security company's all over the time does ring a bell to you as my level of expertise?

I do not know why on Earth you consider that legal jobs assignments can not involve strong reverse tasks much more stronger that the ones available on the wild free zone Very Happy

Anyway I do value creation even if it involves less tricks...
Somehow it makes my soul much happy to create than to destroy Wink


Got to love the modesty of this guy. You work for some secret service or something?...
Post 28 Aug 2005, 19:17
View user's profile Send private message Reply with quote
vid
Verbosity in development


Joined: 05 Sep 2003
Posts: 7108
Location: Slovakia
vid
bogdanontanu wrote:

If you do not think about yourself that you can discover everything by yourself (given enough time and resources that is) --> then you are in big trouble. It means that you do not know how to learn.

And this low self esteem is the exact result of basing your knowledge too much on "tricks" learned from others ... instead of concepts and algorithms. Your "participation in learning" is to walk the path yourself (practically or using your imagination) and improve your neural paths in the process...

Yes, you should cross reference with others once in a while BUT is it important that you discovers things yourself because only this generates a better neuronal path ... a thing hummans name "inteligence".

Of course you need to learn by yourself. Reversing is one of such tools for learning, which you apparently wasn't using (as tool for learning in time when you was learning) otherwise you could appreciate it.

Things i call "tricks" are close to what you call "algorithms" and you for sure know the best ones (simple and powerful) are almost impossible to make out yourself, maybe one-two per life, and they have to be learnt. and MANY of them are hidden in apps, not known.

Quote:

Nope, wide range of knowlwdge is just an aspect of a human with good lerning skills ... and not the opposite.

You can aquire a wide range of knowledge but it is pathetically useless (like you memorize all MSDN of SDK or DDK) unles you know how to learn new things.

Knowing how to learn comes first. Wide knowledge is just a by product that comes along but it is never the other way arround.... unles you want to name yourself as an " humman enciclopedia" ... good for circus but useless otherwise...

With "knowledge" i meant skills, not "data". Reversing is one of such skills.

Quote:

Do not make assumptions on my work area and expertise either...
I can not talk about that because of NDAs but trust me I have reversed a lot of stuff in my life and even last week.

There is no trick that can foul me and a few hours of trace is enough to break any kind of protection... (non-crypto since that takes slightly more time)

You are too sure with yourself. There ALWAYS is someone better, and there always is some trick that you wouldn't overcome (in reasonable time). Usually reversing for $$$ isn't the interesting stuff, nobody makes money from reversing interesting stuff so nobody pays you for this.

Quote:

Working as white hat antiviral, anti-protection, cryptography and military security company's all over the time does ring a bell to you as my level of expertise?

maybe in skill, but not in WHAT you are reversing. Protocol libraries, up-to-date viruses and crypting algorithms just aren't interesting stuff.

Quote:

I do not know why on Earth you consider that legal jobs assignments can not involve strong reverse tasks much more stronger that the ones available on the wild free zone Very Happy

Of course they can (NTFS for example) but strong doesn't mean it contains something worth.

And do not forget i am talking about reversing as a tool for learning, which it undoubtely is. And more experienced you are harder you can judge how much is it worth for newbies. I was personally using it for learning and learnt many things i would otherwise need to go over huge references.
Post 28 Aug 2005, 20:56
View user's profile Send private message Visit poster's website AIM Address MSN Messenger ICQ Number Reply with quote
Display posts from previous:
Post new topic Reply to topic

Jump to:  
Goto page 1, 2  Next

< Last Thread | Next Thread >
Forum Rules:
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Copyright © 1999-2019, Tomasz Grysztar.

Powered by rwasa.