NEW: We have a Discord server now. Click here to go there now!

NOTE: Why not use our List Manager to crack your lists? Its easy and enables better management.

NOTE: When cracking WPA/WPA2 passwords, make sure you check gpuhash.me first incase it's already been processed.

Home - General Discussion - Tip of the day


97 Results - Page 4 of 4 -
1 2 3 4
Author Message
Avatar
freeroute
Moderator
Status: Trusted
Joined: Sat, 16 Jul 2016
Posts: 3250
Team:
Reputation: 10081 Reputation
Offline
Sun, 07 Jul 2019 @ 14:25:42

Recover gpg passphrase using John the Ripper
If you forgot your GPG key passphrase, JTR is able to recover it again.

Here it is how: https://paste.hashkiller.co.uk/MjbFZcr9


: 13hDMK85KhVnPb2eTFBacHD6kDjKYFLudb
XMPP: freeroute@xmpp.jp
General rules | Paid section rules

Avatar
freeroute
Moderator
Status: Trusted
Joined: Sat, 16 Jul 2016
Posts: 3250
Team:
Reputation: 10081 Reputation
Offline
Mon, 08 Jul 2019 @ 08:18:29

Cracking Passwords & MDXfind (Cyphercon 2.0)
"MDXfind is a program which allows you to run large numbers of unsolved hashes, using many algorithms, against large number of plaintext words, very quickly."- waffle

Features:

- Multi-platform: AIX, ARMv6, ARMv7, ARMv8, FreeBSD 8.1+, Linux (32/64), macOS/OS x, Power8, Windows (32/64)
- Multi-algorithm: Can try 536 different core algorithm combinations/variants as observed in the wild - in parallel in a single job, using Judy arrays
- Multi-iteration: can try thousands of iteration counts of any of these core algorithms - also in a single job (effectively millions of end-result algorithms)
- Efficient handling of very large hashlists (100M+) and large wordlists
- Can handle plaintexts of lengths up to 10,000 characters
- Directory recursion for wordlists
- Can take input from stdin
- Can process lists of hashes with mixed algorithms types (output indicates the algorithm; use mdsplit to separate out into per-algorithm lists)
- Supports simple regex for including and excluding hash types by name
- Ability to skip X words from beginning of a wordlist (can be used for simple distribution of work)
- Support for rotated and truncated hashes
- Real-world transformation automation: email address munging, Unicode expansion, HTML escapes
- Read salts, usernames, suffixes, and/or rules from external files
- Configurable CPU thread count
- Apply multiple rules files (either in series or as dot-product)
- Ability to generate any supported hashes and iteration counts (using -z)

When to use it

- If you have a mix of hash types
- If you're not sure what type of hash you have
- If you have many words to try on many hashes
- On GPU-unfriendly algorithms
- To quickly cull common plains from a very large hashlist
- To quickly process many previous hashlists - with new candidate plaintexts, when new algorithms appear, with new rules, etc.

Source: https://www.techsolvency.com/pub/bin/mdxfind/
HK thread: https://forum.hashkiller.co.uk/topic-view.aspx?t=16325&m=115659

https://youtu.be/JLQAXtV85VY
Duration: 35:34


: 13hDMK85KhVnPb2eTFBacHD6kDjKYFLudb
XMPP: freeroute@xmpp.jp
General rules | Paid section rules

Avatar
kevtheskin

Status: n/a
Joined: Wed, 21 Feb 2018
Posts: 310
Team:
Reputation: 188 Reputation
Offline
Wed, 10 Jul 2019 @ 11:13:52

freeroute said:

Cracking Passwords & MDXfind (Cyphercon 2.0)
"MDXfind is a program which allows you to run large numbers of unsolved hashes, using many algorithms, against large number of plaintext words, very quickly."- waffle

Features:

- Multi-platform: AIX, ARMv6, ARMv7, ARMv8, FreeBSD 8.1+, Linux (32/64), macOS/OS x, Power8, Windows (32/64)
- Multi-algorithm: Can try 536 different core algorithm combinations/variants as observed in the wild - in parallel in a single job, using Judy arrays
- Multi-iteration: can try thousands of iteration counts of any of these core algorithms - also in a single job (effectively millions of end-result algorithms)
- Efficient handling of very large hashlists (100M+) and large wordlists
- Can handle plaintexts of lengths up to 10,000 characters
- Directory recursion for wordlists
- Can take input from stdin
- Can process lists of hashes with mixed algorithms types (output indicates the algorithm; use mdsplit to separate out into per-algorithm lists)
- Supports simple regex for including and excluding hash types by name
- Ability to skip X words from beginning of a wordlist (can be used for simple distribution of work)
- Support for rotated and truncated hashes
- Real-world transformation automation: email address munging, Unicode expansion, HTML escapes
- Read salts, usernames, suffixes, and/or rules from external files
- Configurable CPU thread count
- Apply multiple rules files (either in series or as dot-product)
- Ability to generate any supported hashes and iteration counts (using -z)

When to use it

- If you have a mix of hash types
- If you're not sure what type of hash you have
- If you have many words to try on many hashes
- On GPU-unfriendly algorithms
- To quickly cull common plains from a very large hashlist
- To quickly process many previous hashlists - with new candidate plaintexts, when new algorithms appear, with new rules, etc.

Source: https://www.techsolvency.com/pub/bin/mdxfind/
HK thread: https://forum.hashkiller.co.uk/topic-view.aspx?t=16325&m=115659

https://youtu.be/JLQAXtV85VY
Duration: 35:34


Thanks peeps, Could you maybe give a wee example of the syntax please. Cheers hope your well Kev


Avatar
freeroute
Moderator
Status: Trusted
Joined: Sat, 16 Jul 2016
Posts: 3250
Team:
Reputation: 10081 Reputation
Offline
Wed, 10 Jul 2019 @ 17:43:19

Unfortunately mdxfind's manual is undocumented. Some basic commands: https://paste.hashkiller.co.uk/dgqnvH54


: 13hDMK85KhVnPb2eTFBacHD6kDjKYFLudb
XMPP: freeroute@xmpp.jp
General rules | Paid section rules

Avatar
kevtheskin

Status: n/a
Joined: Wed, 21 Feb 2018
Posts: 310
Team:
Reputation: 188 Reputation
Offline
Wed, 10 Jul 2019 @ 21:14:38

freeroute said:

Unfortunately mdxfind's manual is undocumented. Some basic commands: https://paste.hashkiller.co.uk/dgqnvH54


Thanks for this. Cheers Kev.


Avatar
freeroute
Moderator
Status: Trusted
Joined: Sat, 16 Jul 2016
Posts: 3250
Team:
Reputation: 10081 Reputation
Offline
4 days ago

RegEx

Negative look-ahead is denoted (?! ... ).
Example: \d+(?!\.) matches a sequence of digits NOT followed by a decimal point.


: 13hDMK85KhVnPb2eTFBacHD6kDjKYFLudb
XMPP: freeroute@xmpp.jp
General rules | Paid section rules

Avatar
freeroute
Moderator
Status: Trusted
Joined: Sat, 16 Jul 2016
Posts: 3250
Team:
Reputation: 10081 Reputation
Offline
4 days ago

This topic is only indirectly related to the hash cracking. However, it is often very helpful. Basic thing. Every cracker needs to know. It often makes everyday work easier.
Regular expressions: https://www.johndcook.com/blog/2019/06/19/why-regex/


: 13hDMK85KhVnPb2eTFBacHD6kDjKYFLudb
XMPP: freeroute@xmpp.jp
General rules | Paid section rules


97 Results - Page 4 of 4 -
1 2 3 4

137 users online in the last hour
ras31n, capric0rnu$, dnimativ, Username900, mem, InfiniteAttack,

We have a total of 192203 messages in 23889 topics.
We have a total of 21606 registered users.
Our newest registered member is Marcoiannotta.