EvilZone
Hacking and Security => Hacking and Security => : DeXtreme May 07, 2013, 03:11:35 PM
-
So today i tried ssh'ing into a server but they had changed their password.Luckily my backdoor still worked so i manged to get the new password hash ;D ..However,cracking it is taking forever.I'm currently using John the Ripper but i was wondering if there are any other faster alternatives?
-
Iirc you could use hashcat to do this.
This is the GPU cracking era :) wake up.
-
Post deleted, misunderstood the question, apologies.
-
I don't think Hashcat supports the SSH key format. Another option is http://leidecker.info/projects/phrasendrescher.shtml (http://leidecker.info/projects/phrasendrescher.shtml) although I don't know how its speed compares to JtR.
I think you misunderstood.
He obtained the hash from the shadow file which has nothing to do with SSH in this scenario.
If no keys such as rsa are used the login is done with the users account.
-
Iirc you could use hashcat to do this.
This is the GPU cracking era :) wake up.
GPU cracking?.Thats new to me.Gonna go research. ;D Thanks a lot..Do you suggest any particular articles?
Okay i found this website that kinda explains GPU cracking and it's amazing speed.
http://mytechencounters.wordpress.com/2011/04/03/gpu-password-cracking-crack-a-windows-password-using-a-graphic-card/ (http://mytechencounters.wordpress.com/2011/04/03/gpu-password-cracking-crack-a-windows-password-using-a-graphic-card/)
This Ivan Golubev is awesome ;D ;D Thanks again proxx..
Does it work for linux passwords too?
-
Sorry for it being vimeo, but this was at a con we have in town.
Link. (http://vimeo.com/16204254)
-
Does it work for linux passwords too?
Of course it does. Basic hardware is OS-agnostic.
The gist of this is that a GPU on average is able to execute a much larger amount of 32-bit instructions per clock (frequency rate in Hz), up to 800 times or more.
-
GPU cracking looks very efficient.However,my gpu is a low class intel so i guess that's out for now.But i'd like to try it out soon though
-
Woa. My dealer's name is John. And he always takes forever to text me back. And I was just texting him. And this is what I as thinking. Woah. Creepy.
-
I could say alot but wikipedia always outsmarts me :(
$id$salt$hashed", where "$id" is the algorithm used (On GNU/Linux, "$1$" stands for MD5 (http://en.wikipedia.org/wiki/MD5), "$2a$" is Blowfish (http://en.wikipedia.org/wiki/Blowfish_%28cipher%29), "$5$" is SHA-256 (http://en.wikipedia.org/wiki/SHA-256) and "$6$" is SHA-512 (http://en.wikipedia.org/wiki/SHA-512), crypt(3) manpage (http://www.kernel.org/doc/man-pages/online/pages/man3/crypt.3.html), other Unix may have different
DO I need to say more ?
hashcat is your girl.
-
proxx +1 ;D
-
JtR also supports GPU cracking. If you share the hash with me I can try to crack it on my rig.
-
okay..i'll inbox it to you.