Hash Cracking is online - sort of

[kocoman]

Are there similar services like yours? I see passwordcracking dot com, and I put a hash in queue, but don't know how long it will take. I did it here too but want to know about how long to come back to check?

What about here, there is about 60000 unsolved MD5, when is one md5 done/given up before the next one is tried?

thanks

[Bitweasil]

Erm, it's sort of "export, I run a cracker on it, reimport" - right now, it's not automated.

I'm still waiting on a mainboard for my primary hash cracking machine. It should be here next week, but I was promised that a few weeks back, so... we'll see.

[Reelix]

Heya!

I uploaded quite a humongous wad of uncracked hashes from hashkiller.com's March uncracked list - About 8,000 in total.

Hope you don't mind :p

- Reelix

P.S: Awesome site you got going here! Hope you get your machine's soon, and we can see the "cracked" list rising

[Bitweasil]

Thanks...

I'm working on the new version of the site with better hash submission & such.

Hopefully the GTX295s come in soon... I'm running with an 8800GTX & a GTX260 right now, and that's nowhere near enough power for what I want to do.

[Reelix]

Whilst running some cracked MD5 lists through your Add Function

http://www.cryptohaze.com/addsolutions.php

I found some errors:

EG:

Code: Select all

0b21692555efd2333df4cb69335609f3 is not the correct MD5 hash for íàòàøåíüêà

Yes it is...

Got quite a few of these.

- Edit -

Also, every time I go:

098f6bcd4621d373cade4e832627b4f6:test

It says "1 solutions added." even though it had already been cracked before (This makes bulk cracking HIGHLY innacurate)

[Bitweasil]

The password with foreign characters - is that extended ASCII, or UTF8? Could you post the hex dump of the input string as you're hashing it? There are a few ways some of the foreign characters can be encoded, and I'd like to work out the issues with it in my system as I revise it so it can handle foreign characters more or less properly.

Also, http://www.insidepro.com/hashes.php?lang=eng comes up with b2d1969ce7ecf519a73d6b2f9c4f96e4 as the hash for íàòàøåíüêà - it really depends on how it's encoded.

Right now, the front end is VERY alpha - I threw it up in a few hours a while back to help with some specific needs. I'm going through and completely redoing it now, which allows individual user accounts, far better bulk uploads/downloads, user credits (so cracking formerly uncracked passwords will get you credits that can then be used for cracking things that take more time, rainbow table parts will get you credits, wordlist entries that haven't been added before will get you credits), etc.

In the initial "live" implementation, I intend for unsalted hashes to be free to crack through the brute forcers, dictionary attacks, and some of the rainbow tables (though the brute forcers & mutating dictionary attacks should catch most things). Throwing hashes at the largest rainbow tables, or running salted hashes through the system, will require credits, as these are a LOT more computationally intense (I can't run them massively in parallel, and I only have so much computing power available). This may shift as the distributed system comes online if I have a ton of CPU/GPU power I can make use of, but I'll cross that bridge when I get to it.

The major problem right now is that I'm still waiting on the production GPUs. The system as proposed does not work terribly well without a large number of GPU cores to run tasks on, and right now, I have a single 8800GTX in the system. This is a problem, when the concept is designed around 3 GTX295s (6 GTX280-ish cores).

I made some good progress on the web interface last night. Hopefully I can continue that this weekend, but that depends on a lot of other things. :-/

[the_drag0n]

jesus that store must be crap taking months to deliver some cards!

[Bitweasil]

GTX295s are hard to get anywhere. And... since this is discount pricing, I'm pretty sure we're on on the "rush" list.

[Reelix]

Input: íàòàøåíüêà

http://www.paulschou.com/tools/xlate/

Output: 0b21692555efd2333df4cb69335609f3

http://www.insidepro.com/hashes.php?lang=eng

Output: b2d1969ce7ecf519a73d6b2f9c4f96e4

C# App I leeched off the net:

Code: Select all

static void Main(string[] args)
        {
            Console.WriteLine(EncodePassword("íàòàøåíüêà"));
            Console.ReadLine();
        }

        // encode password to md5 hash
        public static string EncodePassword(string originalPassword)
        {
            // Instantiate MD5CryptoServiceProvider, get bytes for original password and compute hash (encoded password)
            Byte[] originalBytes = ASCIIEncoding.Default.GetBytes(originalPassword);
            Byte[] encodedBytes = new MD5CryptoServiceProvider().ComputeHash(originalBytes);

            // Convert encoded bytes back to a 'readable' string
            return BitConverter.ToString(encodedBytes);
        }

Output: 0B-21-69-25-55-EF-D2-33-3D-F4-CB-69-33-56-09-F3 (Same as first)

IRC Chan (irc.plain-text.info #md5 command .hash íàòàøåíüêà)

Output: [MD5] íàòàøåíüêà = 0b21692555efd2333df4cb69335609f3 (Same as first)

http://www.iwebtool.com/md5

Output: 0b21692555efd2333df4cb69335609f3 (Same as first)

http://md5-hash-online.waraxe.us/

Output: 0b21692555efd2333df4cb69335609f3 (Same as first)

So far, every source and site gives the same result, except for http://www.insidepro.com/hashes.php?lang=eng

Somethings up...

On a side note, the local PC Shop sells GTX280's - Not 285's yet

[Bitweasil]

Interesting...

Thanks for the data - I'll check it out when I get to the verification section.