[SQLi]

[Release] Password Cracker

Introduction
This is a password cracker that cracks MD5 hashes and SHA1 hashes using a dictionary attack. It uses Streamreader and it's threaded and double buffered for optimized performance. It does not support salted passwords but it might in the future. Algorithm is auto-detected based on length. And you may only crack one password at the time. There is a basic password dictionary included. I will probably release the source soon. Oh and the theme used in this project is called Influence Theme. Do keep in mind that this is not for serious usage, most hashes have salt or have a more complex hashing algorithm.

Screenshots

Virus scan

Code:

Antivirus Result Update Agnitum - 20121216 AhnLab-V3 - 20121216 AntiVir - 20121217 Antiy-AVL - 20121216 Avast - 20121217 AVG - 20121217 BitDefender - 20121217 ByteHero - 20121212 CAT-QuickHeal - 20121217 ClamAV - 20121217 Commtouch - 20121217 Comodo - 20121217 DrWeb - 20121217 Emsisoft - 20121217 eSafe - 20121216 ESET-NOD32 - 20121216 F-Prot - 20121217 F-Secure - 20121217 Fortinet - 20121217 GData - 20121217 Ikarus - 20121217 Jiangmin - 20121217 K7AntiVirus - 20121214 Kaspersky - 20121217 Kingsoft - 20121217 Malwarebytes - 20121217 McAfee - 20121217 McAfee-GW-Edition- 20121216 Microsoft - 20121217 MicroWorld-eScan - 20121217 NANO-Antivirus - 20121217 Norman - 20121216 nProtect - 20121214 Panda - 20121216 PCTools - 20121217 Rising - 20121217 Sophos - 20121217 SUPERAntiSpyware - 20121216 Symantec - 20121217 TheHacker - 20121216 TotalDefense - 20121216 TrendMicro - 20121217 TrendMicro-HouseCall - 20121217 VBA32 - 20121215 VIPRE - 20121217 ViRobot - 20121217

URL: Virustotal.com

Download
Mirrorcreator.com
Mediafire.com

[h0rr0r]

Pretty simple program, I like the theme!

Thanks for sharing.

[Anonymous]

Thanks for this. This is a great share for the users who like to SQL inject sites. (Since some of the passwords are md5.)

[Kinanizer]

Great share! Downloading now.

[Complibur]

Thanks ! Going to decrypt a sha1 pass right away!

[SQLi]

Thanks ! Going to decrypt a sha1 pass right away!

Let me know how it goes!

[cxS]

This is a password cracker that cracks MD5 hashes and SHA1 hashes using a dictionary attack. It uses Streamreader and it's threaded and double buffered for optimized performance. It does not support salted passwords but it might in the future. Algorithm is auto-detected based on length. And you may only crack one password at the time. There is a basic password dictionary included. I will probably release the source soon. Oh and the theme used in this project is called Influence Theme. Do keep in mind that this is not for serious usage, most hashes have salt or have a more complex hashing algorithm.

DoubleBuffered won't change anything performance-wise for the actual cracking, that is irrelevant. But salt vs non-salted hash does not make a difference either, It's still a hash. The only possible trouble you can run into here (salt or non-salted hash doesn't matter), is that you run into an MD5 collision that isn't the intended plain text value. Pretty uncommon though..

"most hashes have salt or have a more complex hashing algorithm" - If it's MD5, MD5 will always be just MD5 and same thing with SHA1. So if you know what you're dealing with it doesn't matter.

There's no error handling here though, what if the person presses the cancel button on the OpenFileDialog?

Code:

MessageBox.Show("Cracking started, don't click the Crack button again until you recieve another messagebox with the results.")

You can prevent it from doing anything on a second click if the first thread is still processing stuff...

"Algorithm is auto-detected based on length." - This is poor though, you don't want to be evaluating this every iteration with the streamreader, how about before you start looping? If you have to evaluate this each time, it just slows things down for something that is meant to be fast and optimized; cracking.

Code:

Public Sub CrackPassword(ByVal HashedPassword As String) Dim flag As Boolean = False If Not File.Exists(Me.dict.FileName) Then MessageBox.Show("Select a valid dictionary") Else Using reader As StreamReader = New StreamReader(Me.dict.FileName) Do While ((reader.Peek >= 0) And Not flag) Dim strToHash As String = reader.ReadLine Dim str2 As String = String.Empty If (HashedPassword.Length = 40) Then str2 = Me.getSHA1Hash(strToHash) Else str2 = Me.getMD5Hash(strToHash) End If If HashedPassword.Contains(str2) Then MessageBox.Show(("Cracked! Password is: " & strToHash)) flag = True End If Loop If Not flag Then MessageBox.Show("Couldn't crack password!") End If reader.Close End Using End If End Sub

You're not disposing of your reasources for the MD5 and SHA1 hash retrieval though either. Although the "building" of the hexed byte values for the hash is slow the way you're doing it too.

Many ways this could be sped up, although I'm not sure you understand what the Using statement does if you're calling to Close() the StreamReader just before it closes...

[SQLi]

Spoiler:

This is a password cracker that cracks MD5 hashes and SHA1 hashes using a dictionary attack. It uses Streamreader and it's threaded and double buffered for optimized performance. It does not support salted passwords but it might in the future. Algorithm is auto-detected based on length. And you may only crack one password at the time. There is a basic password dictionary included. I will probably release the source soon. Oh and the theme used in this project is called Influence Theme. Do keep in mind that this is not for serious usage, most hashes have salt or have a more complex hashing algorithm.

DoubleBuffered won't change anything performance-wise for the actual cracking, that is irrelevant. But salt vs non-salted hash does not make a difference either, It's still a hash. The only possible trouble you can run into here (salt or non-salted hash doesn't matter), is that you run into an MD5 collision that isn't the intended plain text value. Pretty uncommon though..

"most hashes have salt or have a more complex hashing algorithm" - If it's MD5, MD5 will always be just MD5 and same thing with SHA1. So if you know what you're dealing with it doesn't matter.

There's no error handling here though, what if the person presses the cancel button on the OpenFileDialog?

Code:

MessageBox.Show("Cracking started, don't click the Crack button again until you recieve another messagebox with the results.")

You can prevent it from doing anything on a second click if the first thread is still processing stuff...

"Algorithm is auto-detected based on length." - This is poor though, you don't want to be evaluating this every iteration with the streamreader, how about before you start looping? If you have to evaluate this each time, it just slows things down for something that is meant to be fast and optimized; cracking.

Code:

Public Sub CrackPassword(ByVal HashedPassword As String) Dim flag As Boolean = False If Not File.Exists(Me.dict.FileName) Then MessageBox.Show("Select a valid dictionary") Else Using reader As StreamReader = New StreamReader(Me.dict.FileName) Do While ((reader.Peek >= 0) And Not flag) Dim strToHash As String = reader.ReadLine Dim str2 As String = String.Empty If (HashedPassword.Length = 40) Then str2 = Me.getSHA1Hash(strToHash) Else str2 = Me.getMD5Hash(strToHash) End If If HashedPassword.Contains(str2) Then MessageBox.Show(("Cracked! Password is: " & strToHash)) flag = True End If Loop If Not flag Then MessageBox.Show("Couldn't crack password!") End If reader.Close End Using End If End Sub

You're not disposing of your reasources for the MD5 and SHA1 hash retrieval though either. Although the "building" of the hexed byte values for the hash is slow the way you're doing it too.

Many ways this could be sped up, although I'm not sure you understand what the Using statement does if you're calling to Close() the StreamReader just before it closes...

I know the code is quite messy, that's why I didn't release it as open source. But it works. And lol about the reader.Close, I don't know why I put it there.