![]() |
|
[Release] Password Cracker - Printable Version +- Sinisterly (https://sinister.ly) +-- Forum: Coding (https://sinister.ly/Forum-Coding) +--- Forum: Visual Basic & .NET Framework (https://sinister.ly/Forum-Visual-Basic-NET-Framework) +--- Thread: [Release] Password Cracker (/Thread-Release-Password-Cracker) |
[Release] Password Cracker - SQLi - 12-17-2012 [Release] Password Cracker
Introduction This is a password cracker that cracks MD5 hashes and SHA1 hashes using a dictionary attack. It uses Streamreader and it's threaded and double buffered for optimized performance. It does not support salted passwords but it might in the future. Algorithm is auto-detected based on length. And you may only crack one password at the time. There is a basic password dictionary included. I will probably release the source soon. Oh and the theme used in this project is called Influence Theme. Do keep in mind that this is not for serious usage, most hashes have salt or have a more complex hashing algorithm. Screenshots ![]() ![]() Virus scan Code: Antivirus Result Update
Agnitum - 20121216
AhnLab-V3 - 20121216
AntiVir - 20121217
Antiy-AVL - 20121216
Avast - 20121217
AVG - 20121217
BitDefender - 20121217
ByteHero - 20121212
CAT-QuickHeal - 20121217
ClamAV - 20121217
Commtouch - 20121217
Comodo - 20121217
DrWeb - 20121217
Emsisoft - 20121217
eSafe - 20121216
ESET-NOD32 - 20121216
F-Prot - 20121217
F-Secure - 20121217
Fortinet - 20121217
GData - 20121217
Ikarus - 20121217
Jiangmin - 20121217
K7AntiVirus - 20121214
Kaspersky - 20121217
Kingsoft - 20121217
Malwarebytes - 20121217
McAfee - 20121217
McAfee-GW-Edition- 20121216
Microsoft - 20121217
MicroWorld-eScan - 20121217
NANO-Antivirus - 20121217
Norman - 20121216
nProtect - 20121214
Panda - 20121216
PCTools - 20121217
Rising - 20121217
Sophos - 20121217
SUPERAntiSpyware - 20121216
Symantec - 20121217
TheHacker - 20121216
TotalDefense - 20121216
TrendMicro - 20121217
TrendMicro-HouseCall - 20121217
VBA32 - 20121215
VIPRE - 20121217
ViRobot - 20121217Download Mirrorcreator.com Mediafire.com RE: [Release] Password Cracker - h0rr0r - 12-17-2012 Pretty simple program, I like the theme! Thanks for sharing. RE: [Release] Password Cracker - Anonymous - 12-17-2012 Thanks for this. This is a great share for the users who like to SQL inject sites. (Since some of the passwords are md5.) RE: [Release] Password Cracker - Kinanizer - 12-17-2012 Great share! Downloading now. RE: [Release] Password Cracker - Complibur - 03-11-2013 Thanks ! Going to decrypt a sha1 pass right away! RE: [Release] Password Cracker - SQLi - 03-11-2013 (03-11-2013, 06:25 AM)Processor Wrote: Thanks ! Going to decrypt a sha1 pass right away! Let me know how it goes! RE: [Release] Password Cracker - cxS - 03-12-2013 Quote:This is a password cracker that cracks MD5 hashes and SHA1 hashes using a dictionary attack. It uses Streamreader and it's threaded and double buffered for optimized performance. It does not support salted passwords but it might in the future. Algorithm is auto-detected based on length. And you may only crack one password at the time. There is a basic password dictionary included. I will probably release the source soon. Oh and the theme used in this project is called Influence Theme. Do keep in mind that this is not for serious usage, most hashes have salt or have a more complex hashing algorithm. DoubleBuffered won't change anything performance-wise for the actual cracking, that is irrelevant. But salt vs non-salted hash does not make a difference either, It's still a hash. The only possible trouble you can run into here (salt or non-salted hash doesn't matter), is that you run into an MD5 collision that isn't the intended plain text value. Pretty uncommon though.. "most hashes have salt or have a more complex hashing algorithm" - If it's MD5, MD5 will always be just MD5 and same thing with SHA1. So if you know what you're dealing with it doesn't matter. There's no error handling here though, what if the person presses the cancel button on the OpenFileDialog? Code: MessageBox.Show("Cracking started, don't click the Crack button again until you recieve another messagebox with the results.")You can prevent it from doing anything on a second click if the first thread is still processing stuff... "Algorithm is auto-detected based on length." - This is poor though, you don't want to be evaluating this every iteration with the streamreader, how about before you start looping? If you have to evaluate this each time, it just slows things down for something that is meant to be fast and optimized; cracking. Code: Public Sub CrackPassword(ByVal HashedPassword As String)
Dim flag As Boolean = False
If Not File.Exists(Me.dict.FileName) Then
MessageBox.Show("Select a valid dictionary")
Else
Using reader As StreamReader = New StreamReader(Me.dict.FileName)
Do While ((reader.Peek >= 0) And Not flag)
Dim strToHash As String = reader.ReadLine
Dim str2 As String = String.Empty
If (HashedPassword.Length = 40) Then
str2 = Me.getSHA1Hash(strToHash)
Else
str2 = Me.getMD5Hash(strToHash)
End If
If HashedPassword.Contains(str2) Then
MessageBox.Show(("Cracked! Password is: " & strToHash))
flag = True
End If
Loop
If Not flag Then
MessageBox.Show("Couldn't crack password!")
End If
reader.Close
End Using
End If
End SubYou're not disposing of your reasources for the MD5 and SHA1 hash retrieval though either. Although the "building" of the hexed byte values for the hash is slow the way you're doing it too. Many ways this could be sped up, although I'm not sure you understand what the Using statement does if you're calling to Close() the StreamReader just before it closes... RE: [Release] Password Cracker - SQLi - 03-12-2013 (03-12-2013, 06:21 AM)cxS Wrote:I know the code is quite messy, that's why I didn't release it as open source. But it works. And lol about the reader.Close, I don't know why I put it there. |