Disenchant's Blog » howto http://www.disenchant.ch/blog Blog of Sven Vetsch / Disenchant Thu, 22 Oct 2009 16:25:14 +0000 http://wordpress.org/?v=2.9.2 en hourly 1 Teaching John The Ripper how to Crack MD5 Hashes and more http://www.disenchant.ch/blog/teaching-john-the-ripper-how-to-crack-md5-hashes-and-more/277 http://www.disenchant.ch/blog/teaching-john-the-ripper-how-to-crack-md5-hashes-and-more/277#comments Mon, 05 Oct 2009 10:55:16 +0000 Disenchant http://www.disenchant.ch/blog/?p=277 Long time ago, I posted a guide on how to make John the Ripper able to crack MD5 hashes (http://www.disenchant.ch/blog/teaching-john-the-ripper-how-to-crack-md5-hashes/106). In that posting where some errors and also it’s not up to date so I made a small shell script which downloads, patches and compile JtR 1.7.3.4 for you automatically

wget http://www.openwall.com/john/g/john-1.7.3.4.tar.gz
tar xvf john-1.7.3.4.tar.gz
wget http://www.openwall.com/john/contrib/john-1.7.3.4-jumbo-1.diff.gz
gunzip john-1.7.3.4-jumbo-1.diff.gz
cp john-1.7.3.4-jumbo-1.diff ./john-1.7.3.4
cd ./john-1.7.3.4
patch -p1 < john-1.7.3.4-jumbo-1.diff
cd ./src/
make clean linux-x86-any

This patched John the Ripper can attack the following formats:
DES/BSDI/MD5/BF/AFS/LM/NT/XSHA/PO/raw-MD5/IPB2/raw-sha1/md5a/hmac-md5/KRB5/bfegg/nsldap/ssha/openssha/oracle/MYSQL/mysql-sha1/mscash/lotus5/DOMINOSEC/NETLM/NETNTLM/NETLMv2/NETHALFLM/mssql/mssql05/epi/phps/mysql-fast/pix-md5/sapG/sapB/md5ns/HDAA

I hope you enjoy it :)

]]> http://www.disenchant.ch/blog/teaching-john-the-ripper-how-to-crack-md5-hashes-and-more/277/feed 2 Tethering with iPhone 3.0 under Swisscom, Orange and Sunrise http://www.disenchant.ch/blog/tethering-with-iphone-3-0-under-swisscom-orange-and-sunrise/272 http://www.disenchant.ch/blog/tethering-with-iphone-3-0-under-swisscom-orange-and-sunrise/272#comments Sat, 20 Jun 2009 16:32:14 +0000 Disenchant http://www.disenchant.ch/blog/?p=272 Since a few days, the new iPhone OS 3.0 is available but in Switzerland Tethering is afaik not officially supported by either Swisscom, Orange or Sunrise. bench-artwork.ch has the solution for this and provides configurations for all three big provider. You can find all the information here (it’s in german).

PS: For all Linux users like me, this is also very helpful.

]]> http://www.disenchant.ch/blog/tethering-with-iphone-3-0-under-swisscom-orange-and-sunrise/272/feed 2 Teaching John The Ripper how to Crack MD5 Hashes http://www.disenchant.ch/blog/teaching-john-the-ripper-how-to-crack-md5-hashes/106 http://www.disenchant.ch/blog/teaching-john-the-ripper-how-to-crack-md5-hashes/106#comments Thu, 17 Jan 2008 11:33:05 +0000 Disenchant http://www.disenchant.ch/blog/teaching-john-the-ripper-how-to-crack-md5-hashes/106 Today I was playing around with the well known password cracking tool John the Ripper (JtR) and was looking forward to crack some MD5 hashes. Unfortunately, John still not supports raw-MD5 out of the box and so I was searching the web for a solution. It took me some minutes until I found out, that there are unofficial patches for John’s source code and so I simply patched it and tried to compile. For any reason, I run into problems (doesn’t matter now what problems :P ) and even after about half an hour searching the web for a solution I didn’t find anything. Then a few minutes later I found a simple howto for how to patch and compile John so that you won’t have any problems. The site which solved my problem was gurx.net and I couldn’t find it faster because it’s not written in English nor German. Now of course I’ll show you how to do it the gurx.net-way but with support for even many more algorithms than just MD5.

mkdir john
cd john
wget http://www.openwall.com/john/f/john-1.7.2.tar.bz2
tar -xvf john-1.7.2.tar
cd john-1.7.2
wget ftp://ftp.openwall.com/pub/projects/john/contrib/john-1.7.2-all-9.diff.gz
gzip -d john-1.7.2-all-9.diff.gz
patch -p1 < john-1.7.2-all-9.diff.gz
cd src
make
make clean linux-x86-any

Now you can use John out of the “run” directory.

./john -format=raw-MD5 /home/disenchant/md5_hashes_to_crack.txt

raw-MD5 means that you’ve got an input file (/home/disenchant/md5_hashes_to_crack.txt) like the following:

Alice:5f4dcc3b5aa765d61d8327deb882cf99
Bob:1c0b76fce779f78f51be339c49445c49
…

PS: My machine’s a Xubuntu Edgy but this should work with any Linux box :)

]]> http://www.disenchant.ch/blog/teaching-john-the-ripper-how-to-crack-md5-hashes/106/feed 16 Downloading Videos of spiegel.de http://www.disenchant.ch/blog/downloading-videos-of-spiegelde/101 http://www.disenchant.ch/blog/downloading-videos-of-spiegelde/101#comments Fri, 28 Dec 2007 10:48:55 +0000 Disenchant http://www.disenchant.ch/blog/downloading-videos-of-spiegelde/101 Because of the sister of a friend needed to download videos of spiegel.de for school, I searched for a possibility to do that. It took just a few minutes (or even seconds) to find what I was looking for by analyzing the HTTP traffic, sent to the server by the Movie-Player of SPIEGEL ONLINE, which is completely in Flash. This showed me once again that I can’t just destroy stuff with my knowledge, I can also help people. Because someone else could also be interested in how to do this and it’s more or less the same thing everywhere you’ve got a similar situation on the web, I’ve created a small video HowTo.

Download/Watch HowTo (830 kB)

You’ll find the movies at http://www.spiegel.de/videos, the Firefox extension I’m using is Firebug and of course at the end you see Wget and VLC.

]]> http://www.disenchant.ch/blog/downloading-videos-of-spiegelde/101/feed 4