MD5/SHA1 Cracker I whipped up - (Online & Dictionary Attack) - Perl

Mr. P-teo

So yer i got bored of always working on my database so i whipped up an MD5 cracker. This cracker users either online or dictionary attack and i may add bruteforce if i can be bothered.

Enjoy.


#!/usr/local/bin/perl
use LWP&#58;&#58;Simple;
use Digest&#58;&#58;MD5;
use Digest&#58;&#58;SHA1;


my $option = $ARGV&#91;0&#93;;
my $hash = $ARGV&#91;1&#93;;
my $file = $ARGV&#91;2&#93;;

if($option eq \"-o\"){
        if($hash){
           $check_online = get('http&#58;//md5&#46;hashcracking&#46;com/search&#46;php?md5='&#46;$hash&#46;'');
           if($check_online =~ \"\n\nCleartext of \"&#46;$hash&#46;\" is password\"){
                  print \"\n\n\"&#46;$check_online&#46;\"\n\n\";
           }
        }
}elsif($option eq \"-d\"){
        if($file){
                if($hash){
                        if(length($hash) == 32){
                                open(PASS, \"+&lt; $file\");
                                my @possible_passwords = ();
                                while(&lt;PASS&gt;){
                                push (@possible_passwords, $_);
                                }
                                foreach(@possible_passwords){
                                        $md5_compare = Digest&#58;&#58;MD5-&gt;new;
                                        $md5_compare-&gt;add($_);
                                        $finnished_hash = $md5_compare-&gt;hexdigest;
                                        if($finnished_hash eq $hash){
                                                print \"\n\nCleartext of \"&#46;$hash&#46;\" is \"&#46;$_&#46;\"\n\n\";
                                                $score = 1;
                                                break;
                                        }

                                }
                        }elsif(length($hash) == 40){
                                open(PASS, \"+&lt; $file\");
                                my @possible_passwords = ();
                                while(&lt;PASS&gt;){
                                push (@possible_passwords, $_);
                                }
                                foreach(@possible_passwords){
                                        $sha1_compare = Digest&#58;&#58;SHA1-&gt;new;
                                        $sha1_compare-&gt;add($_);
                                        $finnished_sha1hash = $sha1_compare-&gt;hexdigest;
                                        if($finnished_sha1hash eq $hash){
                                                print \"\n\nCleartext of \"&#46;$hash&#46;\" is \"&#46;$_&#46;\"\n\n\";
                                                $score = 1;
                                                break;
                                        }

                                }
                        }
                        

                        if($score &lt; 1){
                                print \"\n\nPassword Not found&#46;&#46;&#46;\n\n\";
                        }
                        close(PASS);
                }
        }
}else{
print \"MD5/SHA1 Cracker Made By Mr&#46; P-teo \nPerl 5 Version 14 - 2012\n\n\n\";
print \"-o =&gt; Online Cracker (only for MD5)\n\";
print \"+ Example&#58; md5cracker&#46;pl -o 5f4dcc3b5aa765d61d8327deb882cf99\n\";
print \"-d =&gt; Dictionary Attack\n\";
print \"+ Example&#58; md5cracker&#46;pl -d 5f4dcc3b5aa765d61d8327deb882cf99 passwordlist&#46;txt\n\";
}
}

Praxis

That's actually pretty cool. I really should start looking at Perl, it seems to be a very useful language from what I've seen so far. Good stuff, thanks for sharing!

Mr. P-teo

Glad you like, only took me about 40 mins (with breaks), took so long due to a little issue i kept having with the command line arguments but got it sorted.

Sh3llc0d3

People used to make really rubbish md5 crackers, they weren't event crackers more "md5 lookups". Its usually people who've just learned perl and they just do the a hash lookup on a web database, in essence the first pert of your script. It's nice to see you've included the dictionary portion :)

Congrats on a nice script :)

Mr. P-teo

thanks very much, it could also easily be modified to to SHA1 and MD5 aswell.

Deque

Or you add an option for SHA, so it provides both.

Mr. P-teo

^fair enough, edited the code to work for sha1 aswell, commands remain the same although i couldnt find a suitable online cracker for sha1 with no captcher.

Howdy, Stranger!

Top Posters

Who's Online (0)