Root password/Benchmarking

[ StratOS @ 28.08.2003. 13:46 ] @

Code:

root:i1xC4sSrfP/oY:0:0::0:0:Charlie &:/root:/usr/local/bin/bash
daemon:*:1:1::0:0:Owner of many system processes:/root:/sbin/nologin
operator:*:2:5::0:0:System Operator:/:/sbin/nologin
bin:*:3:7::0:0:Binaries Commands and Source:/:/sbin/nologin
tty:*:4:65533::0:0:Tty Sandbox:/:/sbin/nologin
kmem:*:5:65533::0:0:KMem Sandbox:/:/sbin/nologin
games:*:7:13::0:0:Games pseudo-user:/usr/games:/sbin/nologin
news:*:8:8::0:0:News Subsystem:/:/sbin/nologin
man:*:9:9::0:0:Mister Man Pages:/usr/share/man:/sbin/nologin
sshd:*:22:22::0:0:Secure Shell Daemon:/var/empty:/sbin/nologin
smmsp:*:25:25::0:0:Sendmail Submission User:/var/spool/clientmqueue:/sbin/nologin
mailnull:*:26:26::0:0:Sendmail Default User:/var/spool/mqueue:/sbin/nologin
bind:*:53:53::0:0:Bind Sandbox:/:/sbin/nologin
uucp:*:66:66::0:0:UUCP pseudo-user:/var/spool/uucppublic:/usr/libexec/uucp/uucico
xten:*:67:67::0:0:X-10 daemon:/usr/local/xten:/sbin/nologin
pop:*:68:6::0:0:Post Office Owner:/nonexistent:/sbin/nologin
www:*:80:80::0:0:World Wide Web Owner:/nonexistent:/sbin/nologin
nobody:*:65534:65534::0:0:Unprivileged user:/nonexistent:/sbin/nologin

Znate sto trebate da uradite passwd od roota.
To je inache lvl8 na trytohack.nl
Kako brzo vam naprimer jtr rjesi ovo?
Napisite i conf. vase mashine.

attachement !

[ StratOS @ 29.08.2003. 07:16 ] @

Evo primjera :

Loaded 1 password (Standard DES [24/32 4K])
arsanik (root)
guesses: 1 time: 0:00:03:17 c/s: 58989 trying: SabCoch - arsanik

[ AelTHeGriN @ 29.08.2003. 22:56 ] @

E vidis ovo je dobra ideja. Nazalost nisam trenutno u mogucnosti probati crackati, ali budem cim prije...
Ajde za pocetak reci koja je tvoja konfiguracija?

[ nemesis @ 31.08.2003. 02:12 ] @

Citat:

StratOS:
Evo primjera :

Loaded 1 password (Standard DES [24/32 4K])
arsanik (root)
guesses: 1 time: 0:00:03:17 c/s: 58989 trying: SabCoch - arsanik

aj neko pojasni o kom se programu radi ...

[ AelTHeGriN @ 31.08.2003. 11:04 ] @

edit:"John"(napisao sam jack, sasvim refleksno:) the ripper. Imas i verziju za windowse... Ali ja vise volim u linuxu to obavljati, ne znam zasto...

[Ovu poruku je menjao AelTHeGriN dana 31.08.2003. u 18:52 GMT]

[ nemesis @ 31.08.2003. 12:16 ] @

brute force md5...????
elem..mislio sam da je nero napravio da radi ono .. remote..
makar ono.. pusti te na makinu ko usera i onda mu rokash u lokalu . dignesh
128 paralelnih itd..

[ StratOS @ 01.09.2003. 08:08 ] @

Pa jtr mozete dobiti Ovdje.
Radio sam na Win98SE, Celeron 766, 128 MB rama.

To je inache level 8 na opet promenjenom trytohack-u.

C:\WINDOWS\Namizje\john-16w\john-16\run>john -i 1.txt
Loaded 1 password (Standard DES [24/32 4K])
arsanik (root)
guesses: 1 time: 0:00:03:02 c/s: 63850 trying: SabCoch - arsanik

C:\WINDOWS\Namizje\john-16w\john-16\run>

C:\WINDOWS\Namizje\john-16w\john-16\run>john -test
Benchmarking: Standard DES [24/32 4K]... DONE
Many salts: 78478 c/s
Only one salt: 80036 c/s

Benchmarking: BSDI DES (x725) [24/32 4K]... DONE
Many salts: 2760 c/s
Only one salt: 2341 c/s

Benchmarking: FreeBSD MD5 [32/32]... DONE
Raw: 1586 c/s

Benchmarking: OpenBSD Blowfish (x32) [32/32]... DONE
Raw: 105 c/s

Benchmarking: Kerberos AFS DES [24/32 4K]... DONE
Short: 66806 c/s
Long: 180061 c/s

Benchmarking: NT LM DES [24/32 4K]... DONE
Raw: 501643 c/s

[ Miroslav Strugarevic @ 01.09.2003. 08:59 ] @

C:\JOHN-16W\JOHN-16\RUN>john.exe -i passwd.txt
Loaded 1 password (Standard DES [24/32 4K])
arsanik (root)
guesses: 1 time: 0:00:04:36 c/s: 42104 trying: SabCoch - arsanik

PII Celeron 500 MHz 128 MB RAMA. WIN2K

[ nemesis @ 01.09.2003. 10:31 ] @

Citat:

StratOS:
Pa jtr mozete dobiti Ovdje.
Radio sam na Win98SE, Celeron 766, 128 MB rama.

radio na WinXP (gomila ali gomila programa u pozadini + winamp itd...)
P4 ... cel 1.7Ghz 512Mb rama itd..
Benchmarking: Standard DES [24/32 4K]... DONE
Many salts: 166711 c/s
Only one salt: 137754 c/s

Benchmarking: BSDI DES (x725) [24/32 4K]... DONE
Many salts: 4706 c/s
Only one salt: 5095 c/s

Benchmarking: FreeBSD MD5 [32/32]... DONE
Raw: 2141 c/s

Benchmarking: OpenBSD Blowfish (x32) [32/32]... DONE
Raw: 209 c/s

Benchmarking: Kerberos AFS DES [24/32 4K]... DONE
Short: 151710 c/s
Long: 267734 c/s

Benchmarking: NT LM DES [24/32 4K]... DONE
Raw: 781486 c/s

---------------
XXXXXXXXXXXXXXXX>john password.txt
Loaded 1 password (Standard DES [24/32 4K])
arsanik (root)
guesses: 1 time: 0:00:01:36 (3) c/s: 122129 trying: SabCoch - arsanik

[ StratOS @ 03.09.2003. 07:31 ] @

Dobar citat, ima i onih koji ne poznaju Google i slične.

[ StratOS @ 28.01.2007. 12:27 ] @

Zanimljivo, kako brzo ide razvoj compa i brzine.

C:\john171w\john1701\run>john-mmx -i 1.txt
Loaded 1 password hash (Traditional DES [64/64 BS MMX])
arsanik (root)
guesses: 1 time: 0:00:00:38 c/s: 771459 trying: armb059 - arsanal

C:\john171w\john1701\run>john-mmx -test
Benchmarking: Traditional DES [64/64 BS MMX]... DONE
Many salts: 933616 c/s
Only one salt: 857636 c/s

Benchmarking: BSDI DES (x725) [64/64 BS MMX]... DONE
Many salts: 31293 c/s
Only one salt: 30720 c/s

Benchmarking: FreeBSD MD5 [32/32]... DONE
Raw: 7157 c/s

Benchmarking: OpenBSD Blowfish (x32) [32/32]... DONE
Raw: 363 c/s

Benchmarking: Kerberos AFS DES [48/64 4K MMX]... DONE
Short: 177470 c/s
Long: 636136 c/s

Benchmarking: NT LM DES [64/64 BS MMX]... DONE
Raw: 7292K c/s

AMD X2 4200+ 2GHz, 2GB ram