Disenchant's Blog » Linux

Teaching John The Ripper how to Crack MD5 Hashes and more

Disenchant — Mon, 05 Oct 2009 10:55:16 +0000

Long time ago, I posted a guide on how to make John the Ripper able to crack MD5 hashes (http://www.disenchant.ch/blog/teaching-john-the-ripper-how-to-crack-md5-hashes/106). In that posting where some errors and also it’s not up to date so I made a small shell script which downloads, patches and compile JtR 1.7.3.4 for you automatically

wget http://www.openwall.com/john/g/john-1.7.3.4.tar.gz
tar xvf john-1.7.3.4.tar.gz
wget http://www.openwall.com/john/contrib/john-1.7.3.4-jumbo-1.diff.gz
gunzip john-1.7.3.4-jumbo-1.diff.gz
cp john-1.7.3.4-jumbo-1.diff ./john-1.7.3.4
cd ./john-1.7.3.4
patch -p1 < john-1.7.3.4-jumbo-1.diff
cd ./src/
make clean linux-x86-any

This patched John the Ripper can attack the following formats:
DES/BSDI/MD5/BF/AFS/LM/NT/XSHA/PO/raw-MD5/IPB2/raw-sha1/md5a/hmac-md5/KRB5/bfegg/nsldap/ssha/openssha/oracle/MYSQL/mysql-sha1/mscash/lotus5/DOMINOSEC/NETLM/NETNTLM/NETLMv2/NETHALFLM/mssql/mssql05/epi/phps/mysql-fast/pix-md5/sapG/sapB/md5ns/HDAA

I hope you enjoy it

Teaching John The Ripper how to Crack MD5 Hashes

Disenchant — Thu, 17 Jan 2008 11:33:05 +0000

Today I was playing around with the well known password cracking tool John the Ripper (JtR) and was looking forward to crack some MD5 hashes. Unfortunately, John still not supports raw-MD5 out of the box and so I was searching the web for a solution. It took me some minutes until I found out, that there are unofficial patches for John’s source code and so I simply patched it and tried to compile. For any reason, I run into problems (doesn’t matter now what problems ) and even after about half an hour searching the web for a solution I didn’t find anything. Then a few minutes later I found a simple howto for how to patch and compile John so that you won’t have any problems. The site which solved my problem was gurx.net and I couldn’t find it faster because it’s not written in English nor German. Now of course I’ll show you how to do it the gurx.net-way but with support for even many more algorithms than just MD5.

mkdir john
cd john
wget http://www.openwall.com/john/f/john-1.7.2.tar.bz2
tar -xvf john-1.7.2.tar
cd john-1.7.2
wget ftp://ftp.openwall.com/pub/projects/john/contrib/john-1.7.2-all-9.diff.gz
gzip -d john-1.7.2-all-9.diff.gz
patch -p1 < john-1.7.2-all-9.diff.gz
cd src
make
make clean linux-x86-any

Now you can use John out of the “run” directory.

./john -format=raw-MD5 /home/disenchant/md5_hashes_to_crack.txt

raw-MD5 means that you’ve got an input file (/home/disenchant/md5_hashes_to_crack.txt) like the following:

Alice:5f4dcc3b5aa765d61d8327deb882cf99
Bob:1c0b76fce779f78f51be339c49445c49
…

PS: My machine’s a Xubuntu Edgy but this should work with any Linux box

Recording your screen on Linux

Disenchant — Wed, 08 Nov 2006 16:58:40 +0000

Everyone who ever tried to recording his screen on a Linux know, that most of the possible ways sucks because they need so much performance that it’ll be impossible to work as usual if you’re recording. Now I found today a really cool way how to do it so that it don’t need as much performance and also generates small files (Flash Movies).

Now here’s the HowTo:

Step 1:
Get vnc2swf
http://www.unixuser.org/~euske/vnc2swf/pyvnc2swf-0.9.1.tar.gz

Step 2:
Install the libs you need (it shows you which are left)

Step 3:
Install x11vnc

Step 4:
Start a VNC Server with x11vnc and connect to it like this:
python vnc2swf.py -n -o output.swf localhost:0

Step 5:
That’s it -> Enjoy