Author Topic: John taking forever  (Read 1891 times)

0 Members and 1 Guest are viewing this topic.

Offline DeXtreme

  • Peasant
  • *
  • Posts: 95
  • Cookies: 8
  • I was there and you never knew.
    • View Profile
    • My Designs
John taking forever
« on: May 07, 2013, 03:11:35 pm »
So today i tried ssh'ing into a server but they had changed their password.Luckily my backdoor still worked so i manged to get the new password hash ;D ..However,cracking it is taking forever.I'm currently using John the Ripper but i was wondering if there are any other faster alternatives?

Offline proxx

  • Avatarception
  • Global Moderator
  • Titan
  • *
  • Posts: 2803
  • Cookies: 256
  • ФФФ
    • View Profile
Re: John taking forever
« Reply #1 on: May 07, 2013, 03:38:16 pm »
Iirc you could use hashcat to do this.
This is the GPU cracking era :) wake up.
Wtf where you thinking with that signature? - Phage.
This was another little experiment *evillaughter - Proxx.
Evilception... - Phage

Offline Nexus

  • Serf
  • *
  • Posts: 24
  • Cookies: 9
    • View Profile
Re: John taking forever
« Reply #2 on: May 07, 2013, 03:50:46 pm »
Post deleted, misunderstood the question, apologies.
« Last Edit: May 07, 2013, 04:07:13 pm by Nexus »

Offline proxx

  • Avatarception
  • Global Moderator
  • Titan
  • *
  • Posts: 2803
  • Cookies: 256
  • ФФФ
    • View Profile
Re: John taking forever
« Reply #3 on: May 07, 2013, 04:00:50 pm »
I don't think Hashcat supports the SSH key format. Another option is http://leidecker.info/projects/phrasendrescher.shtml although I don't know how its speed compares to JtR.

I think you misunderstood.
He obtained the hash from the shadow file which has nothing to do with SSH in this scenario.
If no keys such as rsa are used the login is done with the users account.
« Last Edit: May 07, 2013, 04:02:05 pm by proxx »
Wtf where you thinking with that signature? - Phage.
This was another little experiment *evillaughter - Proxx.
Evilception... - Phage

Offline DeXtreme

  • Peasant
  • *
  • Posts: 95
  • Cookies: 8
  • I was there and you never knew.
    • View Profile
    • My Designs
Re: John taking forever
« Reply #4 on: May 07, 2013, 05:18:57 pm »
Iirc you could use hashcat to do this.
This is the GPU cracking era :) wake up.

GPU cracking?.Thats new to me.Gonna go research. ;D Thanks a lot..Do you suggest any particular articles?

Okay i found this website that kinda explains GPU cracking and it's amazing speed.
http://mytechencounters.wordpress.com/2011/04/03/gpu-password-cracking-crack-a-windows-password-using-a-graphic-card/
This Ivan Golubev is awesome ;D ;D Thanks again proxx..

Does it work for linux passwords too?
« Last Edit: May 07, 2013, 05:40:44 pm by DeXtreme »

Offline techb

  • Soy Sauce Feeler
  • Global Moderator
  • King
  • *
  • Posts: 2350
  • Cookies: 345
  • Aliens do in fact wear hats.
    • View Profile
    • github
Re: John taking forever
« Reply #5 on: May 07, 2013, 06:23:11 pm »
Sorry for it being vimeo, but this was at a con we have in town.

Link.
>>>import this
-----------------------------

Offline vezzy

  • Royal Highness
  • ****
  • Posts: 771
  • Cookies: 172
    • View Profile
Re: John taking forever
« Reply #6 on: May 07, 2013, 09:33:23 pm »
Does it work for linux passwords too?

Of course it does. Basic hardware is OS-agnostic.

The gist of this is that a GPU on average is able to execute a much larger amount of 32-bit instructions per clock (frequency rate in Hz), up to 800 times or more.
Quote from: Dippy hippy
Just brushing though. I will be semi active mainly came to find a HQ botnet, like THOR or just any p2p botnet

Offline DeXtreme

  • Peasant
  • *
  • Posts: 95
  • Cookies: 8
  • I was there and you never knew.
    • View Profile
    • My Designs
Re: John taking forever
« Reply #7 on: May 08, 2013, 02:58:03 am »
GPU cracking looks very efficient.However,my gpu is a low class intel so i guess that's out for now.But i'd like to try it out soon though

Offline Ragehottie

  • Knight
  • **
  • Posts: 313
  • Cookies: -9
  • Hack to learn, not learn to hack.
    • View Profile
Re: John taking forever
« Reply #8 on: May 08, 2013, 03:06:52 am »
Woa. My dealer's name is John. And he always takes forever to text me back. And I was just texting him. And this is what I as thinking. Woah. Creepy.
Blog: rexmckinnon.tumblr.com

Offline proxx

  • Avatarception
  • Global Moderator
  • Titan
  • *
  • Posts: 2803
  • Cookies: 256
  • ФФФ
    • View Profile
Re: John taking forever
« Reply #9 on: May 08, 2013, 10:15:08 am »
I could say alot but wikipedia always outsmarts me :(
Quote
$id$salt$hashed", where "$id" is the algorithm used (On GNU/Linux, "$1$" stands for MD5, "$2a$" is Blowfish, "$5$" is SHA-256 and "$6$" is SHA-512, crypt(3) manpage, other Unix may have different

DO I need to say more ?
hashcat is your girl.
Wtf where you thinking with that signature? - Phage.
This was another little experiment *evillaughter - Proxx.
Evilception... - Phage

Offline DeXtreme

  • Peasant
  • *
  • Posts: 95
  • Cookies: 8
  • I was there and you never knew.
    • View Profile
    • My Designs
Re: John taking forever
« Reply #10 on: May 09, 2013, 01:33:14 pm »
proxx +1  ;D

Offline Evilone

  • /dev/null
  • *
  • Posts: 16
  • Cookies: 14
    • View Profile
Re: John taking forever
« Reply #11 on: May 09, 2013, 07:24:45 pm »
JtR also supports GPU cracking. If you share the hash with me I can try to crack it on my rig.

Offline DeXtreme

  • Peasant
  • *
  • Posts: 95
  • Cookies: 8
  • I was there and you never knew.
    • View Profile
    • My Designs
Re: John taking forever
« Reply #12 on: May 10, 2013, 03:41:48 am »
okay..i'll inbox it to you.