7 replies to this topic

[RazerM]

I made this to find a string from a MD5, SHA-1, SHA-256, Tiger or Whirlpool hash. You can use a dictionary attack or brute force attack.

The files are in a zip file here because the dictionary file is quite big. It also has files needed for hashing strings.

You need my progress UDF  Progress.au3   3.5K   772 downloads
You also need SolidSnake's StringHash UDF  StringHash.au3   4.81K   796 downloads

Please don't use this for malicious purposes.

[JSThePatriot]

So you can undo a MD5 hash?

Could you try this against my plugin? MD5 Hash Plugin

I didnt know this was feasable.

Thanks,
JS

Edit: I know that with enough determination anything can be undone, but I just didnt see the determination for a MD5 hash...

Edited by JSThePatriot, 10 May 2006 - 04:35 PM.

[RazerM]

of course it can, the dictionary attack hashes every string in the dictionary file and checks if it matches the one in the input box. The brute force one checks every possible combination of characters until the hash of that matches the one on the input box.

[JSThePatriot]

of course it can, the dictionary attack hashes every string in the dictionary file and checks if it matches the one in the input box. The brute force one checks every possible combination of characters until the hash of that matches the one on the input box.

I see. I guess with enough time and determination if it was constructed it can be destructed.

JS

[Jos]

Please don't use this for malicious purposes.

What could be a legitimate purpose ?

[RazerM]

testing password strength? It was a kind of a proof of concept

Edited by RazerM, 10 May 2006 - 05:49 PM.

[Jos]

testing password strength? It was a kind of a proof of concept

Understand... but that is really a nice way of saying that you want to Hack it...

[RazerM]

you could say that...
I have updated the script in the zip file. It uses a better layout now