NEW: We have a Discord server now. Click here to go there now!

NOTE: Why not use our List Manager to crack your lists? Its easy and enables better management.

NOTE: When cracking WPA/WPA2 passwords, make sure you check gpuhash.me first incase it's already been processed.

Home - General Discussion - Create SQLite Hash Tables


10 Results - Page 1 of 1 -
1
Author Message
Avatar
Lankou

Status: n/a
Joined: Thu, 30 May 2019
Posts: 9
Team:
Reputation: 11 Reputation
Offline
Thu, 30 May 2019 @ 16:46:06

Hi Guys,

This is a small utility to generate hashes and store them into sqlite tables.
You can create your own hashes,
Import text files
Search for a hash

Program is freeware and source code (only Windows) can be used by anyone.

Downloads : http://www.mediafire.com/file/2n4pz2cidgtnaq7/PasswordFinder-Bin.7z/file (Binaries W64)
http://www.mediafire.com/file/osr788ov1r83qnd/PasswordFinder-Src.7z/file (C Source Code)

Hope someone will enjoy with the program like I had when writing it.


--------------------
Kenavo

Avatar
dipeperon

Status: Member
Joined: Tue, 03 Apr 2018
Posts: 431
Team:
Reputation: 431 Reputation
Offline
Fri, 31 May 2019 @ 23:59:22

To OP: you should create a github for it

To any readers: always be cautious to run executables or source code from unknown sources.

Virustotal of .exe and .dll:

https://www.virustotal.com/gui/file/2f10a167edb1934c0ace8242ac11890e6941ba55ccd8efaafd34a9eade8caa09/detection
https://www.virustotal.com/gui/file/fa79b624e24cd684420b79265bbae7c32636503776de0b0719f0f553932c3723/detection


They did came up clean, but still be aware and reanalyse.


My haschat stuff (rules, scripts): https://github.com/theherp/Hashcat-stuff

Avatar
Lankou

Status: n/a
Joined: Thu, 30 May 2019
Posts: 9
Team:
Reputation: 11 Reputation
Offline
Thu, 06 Jun 2019 @ 17:11:00

You are right. I will follow yours advices. For now, I have deleted the link, because of a major upgrade.

I made tests with the biggest alphabets (131 characters) for generating passwords of 5 signs. 131 * 131 * 131 * 131 * 131 = 38 579 489 651 It is too long... Actually, with a new version, I store 1 000 000 into each tables without altering the speed. I would like 16 000 000 into each tables. Test are running.

After I could list all the collisions, that can be useful, that one algorithms generate, and the same Hashes between differents algorithms, or the same passwords.

When I have a good result I tell you, and I join the links.

Have a good day.

Cocorico!


--------------------
Kenavo

Avatar
Lankou

Status: n/a
Joined: Thu, 30 May 2019
Posts: 9
Team:
Reputation: 11 Reputation
Offline
Fri, 07 Jun 2019 @ 16:53:35

PasswordFinder-Bin.7z
Taille: 2820787 octets (2754 KiB)
https://www.virustotal.com/gui/file/d6c9db8ffd0730852001f534844b8e0436eebd59b686881d7b0a41e4f8cee78f

SHA1: 129855E98A07CA0386BF55348127BDFF7A04D306
SHA256: D6C9DB8FFD0730852001F534844B8E0436EEBD59B686881D7B0A41E4F8CEE78F

Download link : http://www.mediafire.com/file/zfu56atmdd81ej5/PasswordFinder-Bin.7z/file

Now each database can store from 4 000 000 to 16 000 000 of hashes, depending on the password length.

Each transaction contains 1 000 000 of records.

Speed improved. Bugs corrected.
Inserted or imported passwords are stored in their own tables, not the same as those created by generating passwords.

Someone suggested that I store my source files on github, I will do it when all the options are written, not again. I need time...

If you use, or test the program, tell it to me and tell me what I can improve or add.

Thanks.


--------------------
Kenavo

Avatar
Lankou

Status: n/a
Joined: Thu, 30 May 2019
Posts: 9
Team:
Reputation: 11 Reputation
Offline
Fri, 07 Jun 2019 @ 18:23:59

Sorry, I had uploaded the bad version. This one is the last version.

Virus Total : https://www.virustotal.com/gui/file/9035e4e502fbfb0a63637e544c8fcf91b15f2f551ec0ee8edc1e44c2783bd0dd

Download : http://www.mediafire.com/file/9z4z44lk478ykdg/PasswordFinder-Bin.7z/file

Nom: PasswordFinder-Bin.7z
Taille: 2926352 octets (2857 KiB)
SHA1: CE93E94D34658962681F40164AF99C75AE434996
SHA256: 9035E4E502FBFB0A63637E544C8FCF91B15F2F551EC0EE8EDC1E44C2783BD0DD


Have fun


--------------------
Kenavo

Avatar
Lankou

Status: n/a
Joined: Thu, 30 May 2019
Posts: 9
Team:
Reputation: 11 Reputation
Offline
Wed, 19 Jun 2019 @ 12:55:43

Last release.

You can freely use PasswordFinder, but it should not be used for anything other than educational purposes.
That's it, I saved the face. I put the text that will protect me. The honor is safe, even if all that is the can.

PasswordFinder is written in 'C' language. It is offered in freeware. You can edit, spread the source code, but do not forget to insert a line of text like this "Original from Philippe RIO - France". That's all.

It can not replace tools as powerful as John The Ripper, Cain and Abel ... But it is another tool.

PasswordFinder is a tool for generating hash keys as password functions.
It has several alphabets. It is able to generate passwords of length 1 to 16 characters.
It can import password lists or search for a password by providing its hash key.
Do not think you can hack anyone and anything with this program. You need to have hash keys.

To get there it was necessary to recover these keys from a user. There are several ways to recover them.

1 - Install a keylogger, Virus, which will automatically transfer keystrokes.
2 - During an internet session to position itself between the user and the sites he visits (Man in the Middle).
3 - Using a tool like WireShark, capture the user's session.
4 - Have the user come to your website and offer to test the strength of their passwords.
5 - Call the user, Phishing, and ask him to change his passwords.

The list can not be exhaustive, but serves for understanding.

PasswordFinder stores its data in SQLite tables accessible by any database software.

PasswordFinders uses 287 alphabets.

Missing alphabets, the Signs, contains symbols that could be interpreted as html symbols.

The functions of PasswordFinder:
---------------------------------

1 - Automatically generate passwords from 1 to 16 characters long. During generation, recovery points are created. It is therefore possible to stop a generation at any time.

2 - Import a list of passwords. The import file must be in text format and must include one password by line. The file can have the extension txt or csv, it does not matter. The lines must be separated by a CRLF (Carriage Return & Line Feed), Windows format and not by a LF (Line Feed) penguin format. Files must be encoded in ANSI format.

3 - Manually insert a password.

4 - Search for a password by providing the hash key.

Others:
--------

For some operations, there are two modes of operation:

1 - The "Background" mode: The operations are carried out in the background thus making it possible to use the computer without
to be penalized too much.

2 - The "Foreground" mode: Operations are done in the foreground, making the use of other software slower.
This still has the advantage of making PasswordFinder faster, that's the main thing.

In early versions of the software, I stored 16,000,000 passwords per table, which was a feat. Combining speed and storage with
SQLITE seemed like a feat.
But it was not counting on the flip side, when SQLite reorganized the tables, orders "VACUUM", it was very very long.
The other disadvantage, more annoying that one, prevented a search of password through files.
So I reduced the number of passwords stored at 500 000. Obviously, the tables are much more numerous, but the researches are greatly improved.

Since the program scans all the tables, it can display different passwords for the same hash key, the collisions principle.

Virus Total : https://www.virustotal.com/gui/file/0e7f824009321cd90e0c14ec3da3059924356ea2130494b62f6bc9a206385619/detection

Download link : http://www.mediafire.com/file/x2b49pndfkuk6q3/PasswordFinder-Bin.7z/file

Nom: PasswordFinder-Bin.7z
Taille: 2859918 octets (2792 KiB)
SHA1: 141620F36A92EDC9B45DFE3BC050AFFE2FD6446A

Virus Total : https://www.virustotal.com/gui/file/88b3be1959ff1574abb7c75832ebf45f9600e27fb61b68639b27ff4070cd387f/detection

Source code available at : http://www.mediafire.com/file/dhq3teo4kmpuqrp/PasswordFinder-Src.7z/file

Nom: PasswordFinder-Src.7z
Taille: 4604807 octets (4496 KiB)
SHA1: 10AA026835A406928AA5356B9C3061E9ADDD4CBD


--------------------
Kenavo

Avatar
Lankou

Status: n/a
Joined: Thu, 30 May 2019
Posts: 9
Team:
Reputation: 11 Reputation
Offline
Wed, 26 Jun 2019 @ 03:39:15

Perhaps nobody uses my program but if there is only one user I have a new version specially for him.

This version has many changes and some of them are very useful.

Sometimes it is useful to combine several alphabets to generate passwords. The new alphabet is composed of two subsets. Example: Lowercase letters and Numbers.

The main disadvantage of this alphabet is that it generates too many combinations. Let's imagine that numbers combinations have already been created. Same for lowercase letters.

So the new alphabet will create three types of combinations:

1 - The lowercase letters
2 - The numbers
3 - Lowercase letters and numbers

I've included a new rule: When an alphabet is composed of subsets, the program only generates the combinations covering all subsets at the same time. In the example above, the program will eliminate points 1 and 2 to keep that point 3.

There are now 375 alphabets representing all possible combinations of alphabets.

In these alphabets you will not find:

Numbers & Binary
Signs & Operators
Signs & Morse
Lowercase letters & lowercase vowels
Uppercase letters & uppercase vowels
Lowercase letters & lowercase consonants
Uppercase letters & uppercase consonants

Also, a new rule has been introduced: When an alphabet is included in another larger one, it is not created.

---------------------------------------

If I make changes now, there could be to improve speed when generating passwords. For the instant I have no idea for that.

Download link : http://www.mediafire.com/file/7db7rlajunpm359/PasswordFinder-Bin.7z/file

Virus Total : https://www.virustotal.com/gui/file/a64241420cc7d1bce09b28e853a2725cf6bdc76b62746324d795f49952645875/

Nom: PasswordFinder-Bin.7z
Taille: 2902146 octets (2834 KiB)
SHA1: 8541AA99BF90F710F25E225F0E5ED1B7C9F82615

----------------------------------------

Have fun when using PasswordFinder, it was a pleasure for me to write it.


--------------------
Kenavo

Attachments: Login to view attachments.
Avatar
Lankou

Status: n/a
Joined: Thu, 30 May 2019
Posts: 9
Team:
Reputation: 11 Reputation
Offline
Thu, 27 Jun 2019 @ 10:06:37

Virus Total : https://www.virustotal.com/gui/file/98ef37d7317cd9f7de960d1b553fa8f06ebab3e7f24381e46324242ed8b1ae95

FireEye detected Generic.mg.e8cae5a6784514f0 because I use the Inno installer

In this version : Minor bugs corrected and speed improved when generating passwords.

Nom: PasswordFinderSetup.7z
Taille: 3999832 octets (3906 KiB)
SHA1: 2880133BF2685B8101A3E561F3CD2C75B41A1B7D

Because the program is installated into the program files folder it is possible you don't have any rights for the program to create its subfolder. So I added the possibility to overwrite the defaut subfolders by specifying them into the PasswordFinder.ini file. Here is how:

[Folders]
Datas=C:\Users\xxxxxxxxxxx\PasswordFinder\Tables
Results=C:\Users\xxxxxxxxxxx\PasswordFinder\Results
Temp=C:\Users\xxxxxxxxxxx\PasswordFinder\Temp
Log=C:\Users\xxxxxxxxxxx\PasswordFinder\Log
Config=C:\Users\xxxxxxxxxxx\PasswordFinder\Config

A default file is created into the program folder, just remove comments to use your own parameters.

I added a tool to get the has of a text into the program folder, its name is GenHash.exe That's a program that I wrote.

Link : http://www.mediafire.com/file/yd9hhm4shyhcbff/PasswordFinderSetup.7z/file
I join the old style file without any installer ( VT https://www.virustotal.com/gui/file/619d8b3c36a46b1b2c90d3fc67d6853e26238744527330467f3c837286736d8f)


--------------------
Kenavo

Attachments: Login to view attachments.
Avatar
Lankou

Status: n/a
Joined: Thu, 30 May 2019
Posts: 9
Team:
Reputation: 11 Reputation
Offline
Fri, 28 Jun 2019 @ 13:37:09

https://www.virustotal.com/gui/url/b98f7a94650ed76e4efb69f7d5b860d2cda63b8255037f40990cabca4ff87efe
http://www.mediafire.com/file/wr2dofaarcaot10/PasswordFinderSetup.7z/file
https://www.virustotal.com/gui/url/325e5f969aa1ee1ab636a00eef717ae4ed6fb2e36c93ab642c6917a44d6f8079
https://www.virustotal.com/gui/url/507fe3ab88babf297f463a2abf7edb86683cc2e72ea2d8e3e157c43bc7b81909
https://www.virustotal.com/gui/url/37bfcbb81b310ff16b5e768d5b717d022bea608bcc850f723af3cf36b02b097c
https://www.virustotal.com/gui/url/a4f006ad1b4f8bb2ee5b48f90276e59405a35645df10e29da5686f72148dae9e

Download links : http://www.mediafire.com/file/18nquq3j7nqs8pc/PasswordFinder-Bin.7z/file (No installer)
http://www.mediafire.com/file/8ufkuqua1uzaruh/PasswordFinder-Src.7z/file
http://www.mediafire.com/file/wr2dofaarcaot10/PasswordFinderSetup.7z/file Installer + 7Zip
http://www.mediafire.com/file/e3282sbeunwci3m/PasswordFinderSetupSrc.7z/file
http://www.mediafire.com/file/a7thyon96ie92nu/PasswordFinderSetup.exe/file Installer
http://www.mediafire.com/file/j7iynifa2hppj59/PasswordFinderSetupSrc.exe/file

Corrected the last bug : A button which was not hidden.

I have added the following tables:

- 7 characters length composed uniquely of numbers. (Numbers.7MD57z) (233.758Mb)
https://www.virustotal.com/gui/url/089f40ac28a4a88264fcd843aca1974a0813af8701b6fbcf1e70f1d2d03efe80
Downnload : http://www.mediafire.com/file/1ze9l1e77c5leh8/Numbers7MD5.7z/file

- 1 to 16 characters length composed uniquely of 0 & 1 (Binary.7z) (2.89Mb)
https://www.virustotal.com/gui/url/5d237b516b8ee331c39d2783a503fa898d4fec72a260e9a10fc3c321e7b2acf7
Downnload : http://www.mediafire.com/file/rpfdoblpgbfqm7f/Binary.7z/file

- 1 to 16 characters length composed uniquely of . & - (Morse.7z) (2.87Mb)
https://www.virustotal.com/gui/url/05288060d5e61c1af571347db044de02dbbd561e0ae10c85dd8810550fd19246
Downnload : http://www.mediafire.com/file/z2j2mexiri9yjj6/Morse.7z/file

- 1 to 8 characters length composed of Morse & Binary (Binary&Morse.7z)
https://www.virustotal.com/gui/url/dad4d1b1b81fe3482cb0c53f23b5208ac337fbd69a68a08778e3190d6978a0d8
Downnload : http://www.mediafire.com/file/0866jp6sn2580ip/Binary%2526Morse.7z/file

- 1 to 8 characters length composed of operators (Operators.7z) (37.3Mb)
https://www.virustotal.com/gui/url/3130842bc816a72db438a1f5a1d207bd8c5beb7599669524c748fc56f696f183
Downnload : http://www.mediafire.com/file/83zq7y5ufccpvhj/Operators.7z/file

- 1 to 5 characters length composed of signs (Signs.7z) 180 Mb
https://www.virustotal.com/gui/url/e466b4a64428597c6a0c4ff72f24688a0e7deb72965dffc07bdc8d91e675c846
Downnload : http://www.mediafire.com/file/6b0ezuhozoyprgl/Signs.7z/file

- Consonants Upper Case + Operators + Binary (CuC+Op+Binary.7z) (8.558Mb)
https://www.virustotal.com/gui/url/d76f85f7ac8053e52b9e5498bdf6ab15f808606d3f950210740d8eca4fe64f8f
Downnload : http://www.mediafire.com/file/2awewa0eazxl55v/CuC%252BOp%252BBinary.7z/file

- 1 to 6 characters length composed of numbers (Numbers1-6.7z) (24.736Mb)
https://www.virustotal.com/gui/url/6bfc7d204abfc228280b53a41d9fae8c5affd714b0e6856e35e558ae39af85a1
Downnload : http://www.mediafire.com/file/t399dud6jw69dbp/Numbers1-6.7z/file

- 1 to 5 characters length composed of operators & Numbers (Operators & Numbers1-5.7z) (22.927Mb)
https://www.virustotal.com/gui/url/50b1f00916508c0c2b2b3bf459bc45deac410dd3371165f06ec88decdff80819
Downnload : http://www.mediafire.com/file/sd1iode61jhbd84/Operators_%2526_Numbers1-5.7z/file

- 1 to 3 charcaters length composed of vowels, consonants, operators and Morse (Vlc&Cuc+Op+Morse1-3.7z) (2.162Mb)
https://www.virustotal.com/gui/url/d38d89f7ad8a5190fb77fa7ffda9fe551141133903734536fd4f558957a85388
Downnload : http://www.mediafire.com/file/p5ss1bq717mln20/Vlc%2526Cuc%252BOp%252BMorse1-3.7z/file

- 1 to 8 characters length composed of vowels (Vowels1-8.7z) (44.783Mb)
https://www.virustotal.com/gui/url/26c4c836c06eb7e94531e2f56eb6f36e608b69eebc5c5723afa81c73dcc4dd8b
Downnload : http://www.mediafire.com/file/vf27fy2q4whn9md/Vowels1-8.7z/file

- 1 to 6 characters length composed of numbers and morse symbols (Numbers_&_Morse1-6.7z) (47Mb)
https://www.virustotal.com/gui/url/e33e6c65c7da2e95bcb8606fedd7c5ce715c29208550e14dbd80b15354a9ea8f
Downnload : http://www.mediafire.com/file/mtwkzy408vibh11/Numbers_%2526_Morse1-6.7z/file

- Letters Uppercase + Letters lowercase + Operators (Luc+Llc+Op.7z) (55Mb)
https://www.virustotal.com/gui/url/def63f48fd0485571e3873c5d73ace69e77756281e715909cae7fece6d413c0d/detection
Downnload : http://www.mediafire.com/file/1sgmv408ts7sy3h/Luc%252BLlc%252BOp.7z/file

- 1 to 4 characters length composed of vowels upper case (Vuc & Vlc1-4.7z) (147Mb)
https://www.virustotal.com/gui/url/286c1bd246387715410c135b2f25a9fcf4bfcdb8cdd46e920950eee8fa689e2b/detection
Downnload : http://www.mediafire.com/file/7fxmo4yhq0pwf5f/Vuc_%2526_Vlc1-4.7z/file

I am building a biz zip of all possiblities with numbers for eight passwords length! Be patient.

That's all
Now I stop, I would like to be a user of my program now!

Lankou


--------------------
Kenavo

Avatar
Lankou

Status: n/a
Joined: Thu, 30 May 2019
Posts: 9
Team:
Reputation: 11 Reputation
Offline
Thu, 25 Jul 2019 @ 03:39:04

I made a new version of the software "PasswordFinder".
This is an experimental version and only deals with MD5.
I wanted to meet several challenges:
1-Be fast when searching
2-Decrease the size of the databases
3-Decrease the number of iterations when generating passwords.

1-Be fast when searching
------------------------

Search is faster because I do not record data by alphabet but by
length of the password. When the file containing the hash keys for which
we want to know the password is read, the latter is written in a database.
Then, for each password length, we go through this database.
Only tables containing records are open.

2-Decrease the size of the databases
------------------------------------

In the first version I stored the hash key in its ASCII form. So, a key
MD5 hash is 128 bits or 16 bytes in its numeric form. In ASCII, it occupies 32
bytes.

Although the program worked, the databases were huge.

I was trying to store the hash key in a numeric form. That's twice 64 bits.
In addition these two numbers were registered in unsigned form.
In theory, this was the ideal solution.
In practice, it was impossible to implement.
Indeed, SQLite, while accepting 64-bit integers, INT64, does not know how to handle these numbers.
The only correct way to handle them is to save them as real, type DOUBLE.
Again, another problem. Due to rounding, the numbers are changed. Plus depending
compiler, or even the operating system used, we obtain different results.
Abandoned solution.

I kept when in a corner of my head the digital solution. Instead of registering the key
hash, I will record a CRC. So I'm looking for ADLER's algorithm, the CRC32.
Again, a concern.

When we treat passwords, or rather possible combinations, we do not speak
in hundreds, thousands ... but in millions or even billions of combinations.

For 10 million passwords, this method generates about 10% of collisions. So not reliable,
manage the collisions due to the MD5 plus those caused by the CRC32, I did not see how.

It was necessary to keep the collisions of the MD5 and not to create additional ones.
By reading, then rereading, the documentation, or rather the help file, of the C compiler,
I discovered that there was a function to calculate the 64-bit CRC.
Okay, but the problem is still the same since SQLite does not handle 64-bit numbers.

64 bits is 8 bytes in numeric form and 16 in ASCII form. It's always better than
the 32 bytes for an ASCII hash key. 16 instead of 32, I'm a taker.

The other advantage is that the CRC64 will only generate collisions from 18 446 744 073 709 551 615.
Using this coding, I reduced the size of the databases by 49.35%!

The flip side is that I have to use the AVX2 instruction set, limiting the
porting on computers.

3-Decrease the number of iterations when generating passwords
-------------------------------------------------------------

The number of iterations is the main part of the treatment. To reduce this number is therefore essential.
I managed to reduce it by two, it's not huge, but saves time. Imagine an
alphabet consisting of letters, small or capital letters. I calculated in advance all
combinations on 3 positions. In one go I get 17,576 combinations instead of 3 loops
varying from 1 to 26 each.

To calculate all the combinations on 8 positions I have only 6 loops.

Download at : http://www.mediafire.com/file/wyqxcrqhowl5ykm/MD5Finder_%2528Binary%2529.7z/file

VirusTotal : https://www.virustotal.com/gui/file/40e97e231ad45186821be51e6e68b2c4778ed4d11d8dd01fb79eac2871b6b3b5/detection


--------------------
Kenavo


10 Results - Page 1 of 1 -
1

We have a total of 215392 messages in 26357 topics.
We have a total of 23231 registered users.
Our newest registered member is sleepless.