recommended hash cracker for os x

[xmtyzbloszkcf]

To break the hash for this challenged, I used a hash cracker called Lepton's Crack (lcrack).

You can download the .tar.gz archive here:
http://usuarios.lycos.es/reinob/lcrack/

You will need to install XCode for OS X so that you can compile the package with gcc and run make on it.
http://developer.apple.com/tools/xcode/

In finder, just double-click on the .tar.gz file to decompress it. From inside that resulting directory, simply run:
./configure

and then:
make

You need to create an input file. It should look like:
foo:thehashgoeshere:foo

Note that the "foo"s in this are just placeholders

Choose a character set that you expect the password to be in. For instance, let us suppose that I think it consists of lower case letters from a to d and numbers, with a length of 1 to 4 characters.

You will also need to figure out what hashing scheme is used by this challenge. Let's suppose that it is an md5 hash.

To perform a brute force attack with these parameters, I would run:
./lcrack -m md5 -s a-d0-9 -l 1-4 -xb+ inputfile.txt

To see the full usage information for lcrack, see the README file or run
./lcrack -h

Hope this helps someone.

[thedotmaster]

Best advice would be "ditch OS X".

[mrdspecs]

This is helping me. Thanks for the tip! I'll report back with results once I've finished the mission.

[bogglegz]

You can get almost any unix source program running on OS X with a little finagling. Especially if there's a Free BSD build of it. In addition, MacPorts http://www.macports.org is a great source for open source software. On the other hand, the above poster is partially right, in that you should at least have a second unix/linux operating system that you can boot to run programs you can't find ports for and don't have the patience to customize configuration for yourself.

[brightnoctur]

well first of all, hi guys.

Now, I have to agree on the "ditch os x" comment, but for those of you like me, who have os x and for particular reasons are going to be stuck with it for a couple of months or so, there is John the Ripper for mac.

In fact, i'm bruteforcing the hash to real 5 right now.
One problem though, I'm sure my computer has something to do with this, but maybe os x's JtR is responsible as well... anyway, it's been bruteforcing for 2 hours and a half and it still hasn't found a collision : (

[sanguinerane]

i used the cryptohaze brutforcer. the nice thing about it was that i didnt have to compile anything.. you can use it straight away.
http://www.cryptohaze.com/bruteforcers.php
i just downloaded the binaries and the driver (which you might already have)
and ran it in terminal using the parameters provided at the bottom of the page ( http://www.cryptohaze.com/bruteforcers.php )..
it gave me the password in less than 5 seconds... just make sure that you set restrictions.. if you the read the other thread, you'll know what kind of hash it is (its not MD5). if you just look at it, you can tell that it uses the charset "charsetlowernumeric" and you can specify its min and max values to whatever you want, but it will spit out the answer almost immediately
pretty straightforward
pm me if you need help running it or setting it up on your machine
i use a dying macbook pro if anyone was curious. thats right. its dying.

[yafatface]

Well the software it suggests......i dont know i have a brand new mac with Xcode and cant get i to work
And if you dont have a new mac you have to pay for Xcode :S

[Hujey]

I tried lcracker, this is what I did:
./lcrack -m sha1 -s a-f0-9 -l 1-5 -xb+ ./Hash/myHash.txt
Am I doing something wrong?

That is the output I get:

Code: Select all

-= [ Lepton's Crack ] =- Password Cracker [Mar 20 2010]
(C)  Bernardo Reino (aka Lepton) <lepton@runbox.com>
and Miguel Dilaj (aka Nekromancer) <nekromancer@eudoramail.com>

xtn: initialized 'sha1' module
loaded: CSET[16] = { 0123456789abcdef }
loaded: LSET[5] = { 1 2 3 4 5 }
dbg: loading './Hash/myHash.txt'
mode: null password, loaded 1 password
mode: incremental, loaded 1 password
Length = 1, Total = 16
Length = 2, Total = 256
Length = 3, Total = 4096
Length = 4, Total = 65536
Length = 5, Total = 1048576
Lapse: 1.4921s, Checked: 1118481, Found: 0/1, Speed: 749579 passwd/s


Can someone help me?

[tehalbatross]

OS X is better than Window$, but in my opinion, the best thing to do is get Gentoo and compile John the Ripper with special flags for your processor to take advantage of extended instruction sets and optimizations. This isn't worth doing unless you're already well versed with Linux.

It'd be interesting to use something like Acovea (http://coyotegulch.com/products/acovea/acoveaga.html) on JTR to find the best compile flags using an evolutionary model. JTR would take too long to compile and test to make it worth it though.

[avertiss]

Cane & Abel 4 + Wine, took about 0.5 secs