Printable View
iron geek: another thought on the sam and system file -- you can get it from c:/winnt/repair or c:/windows/repair so i guess we are both kinda right...Quote:
Originally posted here by djscribble
IronGeek: when you say that if you aren't an admin to copy the sam and then use saminside are you talking about using linux w/ ntfs read ability?? i thought the file was "protected" by windows so that you couldn't do that...
Johnnymier, my cluster didn't have enough processing power to crack all my passwords either. Only 2 P4's and 2 P3's. Thats why I want EVERYBODY who tries this to post the size of the cluster and the time it took to crack their list. Also mention the compexity and number of the passwords. This way we can benchmark how much processing power it takes to crack certain types and lengths of PWs. Thanks to everyone who has replies so far, it has motivated me to write more tuts like this one.Quote:
Originally posted here by johnnymier
First of all, Great tutorial NeuTron!
I setup the cluster in 4 P4 boxes 128 ram each. Passwd file had 3 accounts with 6-8 characters (alphanumeric). The first password took about 35 seconds. I left the cluster running for about 50 minutes and couldn't get the other two accounts. Is that normal behavior?? After that time I had to leave the computer lab at uni because some other class needed to use those boxes. I am keen to try it again next week with maybe two more machines in the cluster. I will let you all know of my results.
cheers
-j
Hi.
Cisilia looks like a sophisticated project. Just out of curiosity:
Has anyone looked at the scalability?
Has anyone tried to use it on opteron/itaniumII-processors (I got a
segmentation fault doing ./configure, make. However, I did not try
to change any cisilia-default flags)?
I'd like to add a reference to a "poor man"-version:
the "distributed john the ripper"-project [1], which
is based on john the ripper [2]. Maybe some of you
already have looked at it, since it was mentioned in [3].
Description: The way it works is different than cisilia's -
as much as I understood of the latter. The server "djohnd"
simply splits the password-file, here called passwd,
into smaller pieces and "distributes" the task of cracking
onto several nodes (in a client-server manner). The clients themselves
use "john the ripper" for that purpose.
I guess, after that description you might know, why I call it
a "poor man"-version ;).
Application: For administrators of large systems with many users,
this might be an interesting option. Use idle-time of your machines
to check for weak passwords, coordinated by "djohnd".
Security issue: djohnd is in its current version highly sensible
to DOS attacks. So, and not only because of that,
use it in a trusted environment only.
Hmm, or not at all :D
[1] http://freshmeat.net/projects/djohn/
[2] http://www.openwall.com/john/
[3] http://www.antionline.com/showthread...r&pagenumber=3
Does anyone know of a program like cisilia to crack other types of things, or does anyone know of a clustering system that splits up individual processes?
Jareds411. Cisilia is open source. You could modify the source, adding algorithms yourself. You could even start a project to do so on something like SourceForge. I think it would be a great idea if Cisilia had the capabilities to crack passwords, encryption schemes, EFS, and even RSA and PGP style encryption.
A_T
I'm sure I could do that pretty easily, seeing how I'm 15 and barely know any C++. :p
Back on topic, when I'm running clusterknoppix, it won't let me write to the harddrive, only read. Does anyone know how to change that?
Has anyone successfully changed the alphabet being tested by cisilia??? by default it only tests uppercase chars and numbers, i wanted it to include lowercase also...i've tried building a alphabet file like in cisilia man page, but it seems upper and lowercase get recognized only as being uppercase...(i see this on with verbose on (-V) in cisilia)...as far as i know windows XP passwords can get both upper and lowercase (of course they can, my login password uses both!)
can anyone help me?
hmm i tried your technique in my computer class, but nodes are not automaticly added, it could be i did something wrong, or i am using a different version of clusterknoppix, i downloaded 3.6.
Which version did you download and got it working that nice :S?
probably it tries to crack LanMan hashes, these are the easiest cause they can only be uppercase chars, while NTLM can be Upper and Lower case chars. I think this is the problem you are discribingQuote:
Originally posted here by mgomespt
Has anyone successfully changed the alphabet being tested by cisilia??? by default it only tests uppercase chars and numbers, i wanted it to include lowercase also...i've tried building a alphabet file like in cisilia man page, but it seems upper and lowercase get recognized only as being uppercase...(i see this on with verbose on (-V) in cisilia)...as far as i know windows XP passwords can get both upper and lowercase (of course they can, my login password uses both!)
can anyone help me?
Do you have a DHCP server available? Are the nodes x86 architecture? Oh, and 3.6 is the most recent.Quote:
Originally posted here by Mad_Whitehat
hmm i tried your technique in my computer class, but nodes are not automaticly added, it could be i did something wrong, or i am using a different version of clusterknoppix, i downloaded 3.6.
Which version did you download and got it working that nice :S?
hmm well they are all AMD Processors
i have no DHCP server, but i manually set the ip's and they worked (i could contact the internet)
//edit:
note i didn't try to crack anything, i just opened openmosixviewer and there was nothing there :S, did it miss any options i needed to set ? or am i just acting like a retard ;)
Put up a DHCP server...it makes life a whole lot easier. The problem you're having is that when clusterKnoppix boots, it first tries to get an address, then it joins itself to the cluster. Because you are assigning an IP afterward, it never tries to join the cluster. Im not sure what the openMosix command is to join it to the cluster. If you put up a DHCP server, it'll work...I gaurantee it!
*edit* The best way to do it would be to configure a DHCP server on one of your cluster nodes
-NeuTron
I manage to boot the clusterknoppix, but how do i run cisilia?
No forget it.... I didn't read the post very well.
And to the one which had some questions about getting the hashes, you can use NTFSDOS Professional. Here's the link.
Now, extract the archives to each diskette. Archive 1, to diskette number one (remember to format disk 1 as a ms-dos bootdisk) and archive 2 to diskette number two. Then put in disk1 in the target machine's floppy and boot. When you have booted the diskette, type "ntfspro" in the dos window and follow the short instructions. Then type C: and after that; "cd windows\system32\config". ("cd winnt\system32\config" if you have win2k.)
Now you should be in the config folder. Now type "copy sam A:"
The SAM should now be on your diskette. (if the sam is syskeyed you want the system file to though it's too big for a diskette, you'll have to copy it on a usb pen or something like that. It WILL NOT work to copy it directly to the disk.)
When your in windows again, put in your diskette and copy the sam over to a more secure place so you where you won't lose it. You'll never know.
If the sam is syskeyed then download SamInside 2.2.6.0 full version, load the sam and the system file, and then extract the hashes to a file. Now you have unlocked the sam!
msg me if you need help with the sam file.
I have a seriously problem; When i boot clusterknoppix and open the mosixview panel, there are no nodes there. :S
Yes i have a DHCP server on the network, and i have set to recieve IP adress automatically.
Can someone help me?
I need more information about your setup before I can help you. PM when you get a chance and we can discuss it on IRC because I hate writing long posts :)Quote:
Originally posted here by NtrlZr
I have a seriously problem; When i boot clusterknoppix and open the mosixview panel, there are no nodes there. :S
Yes i have a DHCP server on the network, and i have set to recieve IP adress automatically.
Can someone help me?
-NeuTron
I have Cluster Knoppix up and running on 4 machines. Everything works great, except I can't give Cisilia more than 9 threads. 10 or greater causes it to fail. With 9 processes, all of my machines are only running at about 70%. Any suggestions?
You only want to load one process per processor. Each process tries to take 100% of the processor, so loading more than one per machine doesnt make sense. I know this is contrary to my tutorial but Ive learned a little more about this since then.
Well after a few spindles of cd's and a 200 box cluster (Thanks local junior college), This cracks the passwords before my I-pod will play a mp3. Thanks.
Hi floridabull,
You might want to consider making your second post in a thread that isn't already almost four months old...the flashing dates mean the thread is old...and unless you have something ' relevant to add ' to the discussion...please don't revive it.
Eg ;)
what is the best software for hacking yahoo email addresses?
This thread is 5 years old.
Software doesn't 'hack'. Unless you're a script kiddie. (in which case you should be thrown off this earth anyway)
Next time please try to do a better job of hiding your ignorance. :rolleyes:
You're lucky I'm in a good mood. Read up:
http://en.wikipedia.org/wiki/Hack_(technology)
http://en.wikipedia.org/wiki/Vulnerability_(computing)
http://en.wikipedia.org/wiki/Hash_function
http://en.wikipedia.org/wiki/Cryptography
http://en.wikipedia.org/wiki/Cryptoanalysis
http://en.wikipedia.org/wiki/SQL
Merry Christmas :drink:.
This will work Shotgun13!!! Check it out: http://www.brothersoft.com/retrieve-...ord-53872.html
Good Luck!!!
0100100100100111011011010010000001110011011101010111001001100101001000000110100101110100001001110111001100100000011011000110111101100001011001000110010101100100001000000110011001110101011011000110110000100000011011110110011000100000011011010110000101101100011101110110000101110010011001010010000001100001011011100110010000100000011011110111010001101000011001010111001000100000011000110111001001100001011100000010110000100000011101000110111101101111001011100010111000101110001000000011101100101001
↑ :lildevil:
I find it much easier to just wait until the free e-mail account becomes in-active, then register it up, then visit the various site's it was attached to and do the forgot password.
:D