Hashcat Password Cracker tools

-
Dalam kesempatan kali ini kita akan menguji tools password cracker yg sangat melegenda, yaitu Hashcat Password Cracker.
Hashcat adalah sebuat tools cracker password dengan hash MD5 kemudian di bantu dengan wordlist yg besar.
Dalam pengujian kali ini saya akan coba mengungkap kebenaran dari tools (versi console) yg satu ini

Bagi pengguna Backtrack tools yg satu ini bisa didapat di :

Applications >> Backtrack >> Privilege Escalation >> Password Attacks >> Offline Attacks >> Hashcat
atau
Alt+F2 kemudian tulis hashcat

bagi yg belum ada mohon untuk di install terlebih dahulu :

root@bt:~# sudo apt-get install hashcat

 Oke, selanjutnya dalam kasus ini password yang kita gunakan adalah : (H1d3m1ch1_H1r0yuk1)
maka hashnya : f193e0d8e597a4c03f6811f45f5da5df

Kita akan pecahkan menggunakan Md5 crack online, yaitu :
http://md5online.org/ 
hmm, not good, ternyata Not Found

kemudian http://www.cmd5.org/

Not Found


lagi lagi Not Found. 

hmm, oke saat hashcat beraksi . (sebelum nya buat file baru berisi hash yg ingin di crack)

buka terminal kemudian ketik :

 root@bt:# cd /pentest/passwords/hashcat/ (ENTER)

 kemudian masukkan perintah berikut :

./hashcat-cli32.bin -m 0 /root/hash.txt /root/pass-list.txt (ENTER)


Penjelasan.
-m 0 = Jenis hash (untuk lebih lengkapnya ketik : ./hashcat --help)
/root/hash.txt  = directory dimana saya menyimpan file hash
/root/pass-list.txt   = directory letak wordlist


root@bt:/pentest/passwords/hashcat# ./hashcat-cli32.bin -m 0 /root/hash.txt /root/pass-list.txt
Initializing hashcat v0.40 by atom with 8 threads and 32mb segment-size...

NOTE: press enter for status-screen

Added hashes from file /root/hash.txt: 1 (1 salts)
Activating quick-digest mode for single-hash
f193e0d8e597a4c03f6811f45f5da5df:(H1d3m1ch1_H1r0yuk1)
All hashes have been recovered
root@bt:/pentest/passwords/hashcat#




Wow, Amazing dalam hitungan detik hashcat berhasil memecahkan passwords tersebut...

f193e0d8e597a4c03f6811f45f5da5df:(H1d3m1ch1_H1r0yuk1)


Author by [H2]

Popular posts from this blog

Decrypt MD5 $Wordpress

-
Image
Hy, I'm back again. I will discuss how to Decrypt a password in the form the MD5 hash wordpress. here are some examples of hash md5 encryption wordpress will we Decrypt: HASH                                                                                  PASS $P$BDHjLCEroc8ujkcs8RZxOhcE80aV5h.           : th3sweety0ne  $P$BPXNfl3mZiO7PZc4XZqFFjX7TyP7Lh.           : Pabl0-saChez $P$BqilSln8PD9SBFuTx8KkaXz62aIIvV/             : m4rim4r123 $P$BnfObieGq5ygdt0OMgwbnKvFt8EFUs.          : Gh0stTrac3 $P$B.RwpJQV8ANOyl19RGHhCaYYgJyvQM1  : *12345*0a0b0c0d many of my friends are overwhelmed when decrypt wordpress md5 hash. so are they wasting their jobs because they could not solve this one password. Equipments: 1. Hashcat             ==> Decrypt Hash 2.  Rockyou.txt       ==> Wordlists 3. Hash-Identifier   ==> to see hash mode Here I use the Operating System Kali Linux. First Step : we see the  kind of hash we will Decrypt. to facilitate us in decryption
Read more

Exploit Samba "SmbClient"

-
Image
Such as FTP (File Transfer Protocol) samba include things like getting files from the server to the local machine, putting files from the local machine to the server, retrieving directory information from the server and so on. in this case we have to get the victim to allow shared folders or files. Equipments : 1. SmbClient 2. Nmap 3. Metasploit The firstStep. scanning port the victim's ip-address using Nmap. in here that we need right port is port   445  microsoft-ds. # Nmap (Victim Ip-Address) seen in the picture above. I am lucky :) now, let us look the contents of the port # nmap -p445 --script=smb-os-discovery (Victim Ip-Address) --script=smb-os-discovery : Attempts to determine the operating system, computer name, domain, workgroup, and current time over the SMB protocol (ports 445 or 139) . seen in the picture above, it turns out the victim we use Operating System Windows 7 Ultimate.  Computer Name And NetBIOS Name is a ANONYMOUS-PC. now,
Read more

Configure Pure-FTP on Kali Linux

-
Image
FTP or file transfer protocol is a protocol that allows you to transfer files to and from a remote machine. BackTrack has pure-FTPd installed by default. FTP operates on port 21. Contents : 1. Installasion 2. Configuration 3. Run Installation Pure-Ftpd # apt-get install pure-ftpd Installation Success =)) Configure Ftpd add new group: # groupadd ftpgroup add user: # useradd -g ftpgroup -d /dev/null -s /etc ftpuser -g =  name or ID of the primary group of the new account -d = home directory of the new account -s = login shell of the new account configure store a list of users: # pure-pw useradd myftp -u ftpuser -d /home/ftp/pub/myftp myftp = your ftp username please enter you password. configure puredb database file # pure-pw mkdb The next entry to the directory /etc/pure-ftpd/auth/ # cd /etc/pure-ftpd/auth then Create hard links by default: # ln -s ../conf/PureDB 60pdb then, make a directory /ftp # mkdir /home/ft
Read more