flat assembler
Message board for the users of flat assembler.

Home Search Register
Log in to check your private messages Log in

Index > Projects and Ideas > MD5 Password Recovery Tool

Goto page Previous  1, 2, 3, 4  Next
Author
Thread Post new topic Reply to topic
sylwek32



Joined: 27 Apr 2006
Posts: 339
sylwek32 04 Jun 2006, 23:52
Quote:

Yeah.. the lovely SMALL rainbow tables Laughing
Here's a link I found through google, there's direct links to download rainbow tables:
http://rainbowtables.shmoo.com/

Oops! I thought I read that 42Gb as 42KB Shocked
But, it sounds small, right? Laughing

EDIT: UCM: using your version, everytime I click "Find" with or without any hash the program closes itself Shocked Not very handy


Has somebody webspace for me ?
Can upload over 100GB of Tables lol Laughing

IF somebody has Webspace THEN : can you give me some ?

It would be very very good if it were Webspace under Linux with some limited shell access Very Happy
Post 04 Jun 2006, 23:52
View user's profile Send private message Reply with quote
UCM



Joined: 25 Feb 2005
Posts: 285
Location: Canada
UCM 05 Jun 2006, 00:14
saigon, I don't see how it's possible that you would get 'Thread already running'. (by the way, that is from the application, not windows)
The code has:
Code:
  findT:
        test    [running],1
        jnz      already_running
        mov     [running],1
        invoke  CreateThread,0,0,find,0,0,[thid]
        mov     [th],eax
        test    eax,eax
        jnz     finish
  already_running:
        invoke  MessageBox,[hwnddlg],err_running,NULL,MB_OK+MB_ICONWARNING
        jmp     finish

'running' has been declared with 'running db 0' in the data section. If you test 0 with 1 (AND), you get 0, which should NOT trigger 'jnz'. That's really, really, really odd.
Post 05 Jun 2006, 00:14
View user's profile Send private message Reply with quote
Turok



Joined: 05 Jun 2005
Posts: 23
Turok 05 Jun 2006, 00:21
I always thought that rainbow table just makes a normal table and searches it, but that way it would take too much space, so it never got my attention Very Happy Now i see that its much more behind it:
http://lasecwww.epfl.ch/pub/lasec/doc/Oech03.pdf

However salting kills the rainbow Sad
So we still need bruteforce Very Happy
Post 05 Jun 2006, 00:21
View user's profile Send private message Reply with quote
sylwek32



Joined: 27 Apr 2006
Posts: 339
sylwek32 05 Jun 2006, 00:36
Hey , does somebody know Boinc ?
Maybe we can make a Boinc Project wich uses this FASM app.. And so it can convert a 16 Chr md5 in under <10sec.. Very Happy

- Boinc is distributed computing..

Has somebody here worked with Distributed computing ?
If yes i need more info.
Keywords: Linux, Debian ..
Post 05 Jun 2006, 00:36
View user's profile Send private message Reply with quote
saigon



Joined: 29 May 2006
Posts: 62
saigon 05 Jun 2006, 07:22
@sylwek32: I have not, but sounds interesting... if you can crack a MD5 hash with 16 characters in under 10sec, then WOW! And, BTW: Nobody gives 100Gb for free, people might think you want to upload illegal stuff ..

@UCM: I tested the running variable and yes it's zero, but the program still alerts that the thread is running. I know this is very odd, but I'm not lying.
Post 05 Jun 2006, 07:22
View user's profile Send private message Reply with quote
UCM



Joined: 25 Feb 2005
Posts: 285
Location: Canada
UCM 05 Jun 2006, 12:00
Maybe the thread is not being created properly, and the code is (accidentally) running into the already running part... (bug on my part)
Try using this version, if it just closes then the thread wasn't created
Note: this version has a 'Clear' button Very Happy
EDIT: There may have been a different bug too, fixed that as well


Description:
Download
Filename: md5prt.asm
Filesize: 15.78 KB
Downloaded: 883 Time(s)


_________________
This calls for... Ultra CRUNCHY Man!
Ta da!! *crunch*
Post 05 Jun 2006, 12:00
View user's profile Send private message Reply with quote
saigon



Joined: 29 May 2006
Posts: 62
saigon 05 Jun 2006, 21:30
UCM, that version works perfectly! I don't get any error and the program recovers the passwords quickly (Your version seems to be faster than Turok's). Thanks a lot!
Post 05 Jun 2006, 21:30
View user's profile Send private message Reply with quote
sylwek32



Joined: 27 Apr 2006
Posts: 339
sylwek32 05 Jun 2006, 22:29
very nice !
UCM good work Very Happy
Post 05 Jun 2006, 22:29
View user's profile Send private message Reply with quote
sylwek32



Joined: 27 Apr 2006
Posts: 339
sylwek32 05 Jun 2006, 22:35
Have one question.. again :/..

How to make it run under dos shell or in CMD?

It would be great if it can work in Commandline.
- Accept commandline args..
- Show output in console...
Post 05 Jun 2006, 22:35
View user's profile Send private message Reply with quote
UCM



Joined: 25 Feb 2005
Posts: 285
Location: Canada
UCM 06 Jun 2006, 01:34
Like this! Razz
Maybe I have too much time on my hands.
This program tries to detect what part of the command line is its own program name, and the 32 characters of the rest (after the space, of course) are used as the MD5 hash. If there are less than 32 characters it is supposed to report an error, but it doesn't work (for some reason.)
If you run it normally, you will see 2 of the resulting string corresponding to the hash. This is because it can be redirected to a file or piped to a different program, and the string alone will be sent and the rest will go to the console. (Check the source and try 'md5prtwin32con 12227AC1EA36D1AB2C0656099BE9F8CB > blah.txt' to see what I mean.)

EDIT: Well, I fixed it now.


Description:
Download
Filename: md5prtwin32con.asm
Filesize: 15.9 KB
Downloaded: 894 Time(s)


_________________
This calls for... Ultra CRUNCHY Man!
Ta da!! *crunch*
Post 06 Jun 2006, 01:34
View user's profile Send private message Reply with quote
sylwek32



Joined: 27 Apr 2006
Posts: 339
sylwek32 06 Jun 2006, 12:01
@UCM : Thanks.. Works good! Faster than the GUI version Very Happy

Ps: it works only at 1 Processor at a Dual Processor machine , right ?

Is it a lot of work to make it run under 2 CPU's ?
I want to use the Full power of my Tyan Tiger 2xAthlonMP 2000 machine Very Happy

Greetings...
Post 06 Jun 2006, 12:01
View user's profile Send private message Reply with quote
sylwek32



Joined: 27 Apr 2006
Posts: 339
sylwek32 06 Jun 2006, 13:20
Hi you all !
I have made a .exe from the asm file , compressed it with upx..
And now it´s ~6KB !!

That´s very nice for a MD5 recovery tool Very Happy

Here it is..
you can download...


Description:
Download
Filename: md5tb.rar
Filesize: 5.63 KB
Downloaded: 909 Time(s)

Post 06 Jun 2006, 13:20
View user's profile Send private message Reply with quote
Quantum



Joined: 24 Jun 2005
Posts: 122
Quantum 06 Jun 2006, 18:38
And then you embed a 600K xm track and make the executable image 100 times bigger Smile
Post 06 Jun 2006, 18:38
View user's profile Send private message Reply with quote
sylwek32



Joined: 27 Apr 2006
Posts: 339
sylwek32 06 Jun 2006, 21:12
lol Very Happy

no.. the xm emb. example was needed for something other..

just wanted to see how it works Very Happy
Post 06 Jun 2006, 21:12
View user's profile Send private message Reply with quote
sina



Joined: 18 Aug 2003
Posts: 132
Location: istanbul turkey
sina 07 Jun 2006, 09:07
i think a progress bar or just simply a turning "/" char would be fine to see it working

and hmmm being able to chose character set, casing, numbers Smile
Post 07 Jun 2006, 09:07
View user's profile Send private message ICQ Number Reply with quote
Feryno



Joined: 23 Mar 2005
Posts: 514
Location: Czech republic, Slovak republic
Feryno 07 Jun 2006, 09:36
Hello guys, if you use 128-bit xmm registers, you'll be able to calculate 4 hashes every cycle (really speed-up).
Download lovec64 from my home page (has brute force password generating routine for 4 passwords in 1 cycle too).
Post 07 Jun 2006, 09:36
View user's profile Send private message Visit poster's website ICQ Number Reply with quote
sylwek32



Joined: 27 Apr 2006
Posts: 339
sylwek32 07 Jun 2006, 21:31
cool it removed a very long password from my word doc. in 5 secounds on a Dual Machine Very Happy
Post 07 Jun 2006, 21:31
View user's profile Send private message Reply with quote
sylwek32



Joined: 27 Apr 2006
Posts: 339
sylwek32 09 Jun 2006, 06:20
Maybe somebody can add a code which shows on what time a function beginned...

Sorry for that english^^

So:

- 19:00 - MD5 RECOVERY STARTED
- 19:01 - CHARS: 5
- 19:44 - CHARS: 9
- 20:00 - Found = [RESuLT]

or an external log file with all informations...

e.G. CPU Type , Speed , Recovery Speed , and..
you know..
Post 09 Jun 2006, 06:20
View user's profile Send private message Reply with quote
Patrick_



Joined: 11 Mar 2006
Posts: 53
Location: 127.0.0.1
Patrick_ 16 Jun 2006, 15:08
I wrote a brute-forcer that is quite a bit (at least 100%) faster than this program. It also tells you how long it took to crack the hash. Link below to my post. Smile

http://board.flatassembler.net/topic.php?p=40254#40254
Post 16 Jun 2006, 15:08
View user's profile Send private message Reply with quote
sylwek32



Joined: 27 Apr 2006
Posts: 339
sylwek32 16 Jun 2006, 17:46
Try to crack this:

a2c8f5651443c74f1a673a5514ff5e70

it are 6 chrs
Post 16 Jun 2006, 17:46
View user's profile Send private message Reply with quote
Display posts from previous:
Post new topic Reply to topic

Jump to:  
Goto page Previous  1, 2, 3, 4  Next

< Last Thread | Next Thread >
Forum Rules:
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Main index Download Documentation Examples Message board

Copyright © 1999-2025, Tomasz Grysztar. Also on GitHub, YouTube.

Website powered by rwasa.