<?php set_time_limit(0); ///////////////////////////////////////////////// // // md5(md5(salt) + md5(password)) bruteforcer // coder: sp1r1t // www.security-shell.com // version: 1.0 // this script works only if hashing is done like this md5(md5(salt) + md5(password)) // ///////////////////////////////////////////////// // INSERT YOUR HASH AND SALT HERE: $hash = ""; $salt = ""; // STEALTH MODE ON=1 OFF=0 (if stealth is ON, cpu usage will be low and normal, but bruteforcer will be slower, if stealth mode is OFF, cpu usage will be 100% but bruteforcer will be faster) $stealth = 0; // // ARRAYS WITH CHARACTERS TO USE IN BRUTEFORCING PROCESS | IF YOU ADD YOUR ARRAY MAKE SURE YOU PUT IT IN ARRAY_MERGE FUNCTION TO JOIN THE OTHER ARRAYS $lower = array('a','b','c','d','e','f','g','h','i','j','k','l','m','n','o','p','q','r','s','t','u','v','w','x','y','z'); $numeric = array('0','1','2','3','4','5','6','7','8','9'); $upper = array('A','B','C','D','E','F','G','H','I','J','K','L','M','N','O','P','Q','R','S','T','U','V','W','X','Y','Z'); $GTFO = array_merge($lower, $numeric, $upper); // // KEEP AWAY FROM THIS PIECE OF CODE IF YOU DON'T KNOW WHAT YOU'RE DOING $found = 0; $count = count($GTFO); $hash = strtolower($hash); if(strlen($hash) == 32) { //----------------------------------------------1-------------------------------------------------- for($i1=0;$i1<$count;$i1++) { if(md5(md5($salt).md5($GTFO[$i1])) == $hash) { writetofile("$hash : ".$GTFO[$i1],$salt); $found = 1; break; } if($stealth == 1) usleep(1); } //----------------------------------------------2-------------------------------------------------- if($found != 1) for($i20=0;$i20<$count;$i20++) for($i21=0;$i21<$count;$i21++) { if(md5(md5($salt).md5($GTFO[$i20].$GTFO[$i21])) == $hash) { writetofile("$hash : ".$GTFO[$i20].$GTFO[$i21],$salt); $found = 1; break; } if($stealth == 1) usleep(1); } //----------------------------------------------3-------------------------------------------------- if($found != 1) for($i30=0;$i30<$count;$i30++) for($i31=0;$i31<$count;$i31++) for($i32=0;$i32<$count;$i32++) { if(md5(md5($salt).md5($GTFO[$i30].$GTFO[$i31].$GTFO[$i32])) == $hash) { writetofile("$hash : ".$GTFO[$i30].$GTFO[$i31].$GTFO[$i32],$salt); $found = 1; break; } if($stealth == 1) usleep(1); } //----------------------------------------------4-------------------------------------------------- if($found != 1) for($i40=0;$i40<$count;$i40++) for($i41=0;$i41<$count;$i41++) for($i42=0;$i42<$count;$i42++) for($i43=0;$i43<$count;$i43++) { if(md5(md5($salt).md5($GTFO[$i40].$GTFO[$i41].$GTFO[$i42].$GTFO[$i43])) == $hash) { writetofile("$hash : ".$GTFO[$i40].$GTFO[$i41].$GTFO[$i42].$GTFO[$i43],$salt); $found = 1; break; } if($stealth == 1) usleep(1); } //----------------------------------------------5-------------------------------------------------- if($found != 1) for($i50=0;$i50<$count;$i50++) for($i51=0;$i51<$count;$i51++) for($i52=0;$i52<$count;$i52++) for($i53=0;$i53<$count;$i53++) for($i54=0;$i54<$count;$i54++) { if(md5(md5($salt).md5($GTFO[$i50].$GTFO[$i51].$GTFO[$i52].$GTFO[$i53].$GTFO[$i54])) == $hash) { writetofile("$hash : ".$GTFO[$i50].$GTFO[$i51].$GTFO[$i52].$GTFO[$i53].$GTFO[$i54],$salt); $found = 1; break; } if($stealth == 1) usleep(1); } //----------------------------------------------6-------------------------------------------------- if($found != 1) for($i60=0;$i60<$count;$i60++) for($i61=0;$i61<$count;$i61++) for($i62=0;$i62<$count;$i62++) for($i63=0;$i63<$count;$i63++) for($i64=0;$i64<$count;$i64++) for($i65=0;$i65<$count;$i65++) { if(md5(md5($salt).md5($GTFO[$i60].$GTFO[$i61].$GTFO[$i62].$GTFO[$i63].$GTFO[$i64].$GTFO[$i65])) == $hash) { writetofile("$hash : ".$GTFO[$i60].$GTFO[$i61].$GTFO[$i62].$GTFO[$i63].$GTFO[$i64].$GTFO[$i65],$salt); $found = 1; break; } if($stealth == 1) usleep(1); } //----------------------------------------------7-------------------------------------------------- if($found != 1) for($i70=0;$i70<$count;$i70++) for($i71=0;$i71<$count;$i71++) for($i72=0;$i72<$count;$i72++) for($i73=0;$i73<$count;$i73++) for($i74=0;$i74<$count;$i74++) for($i75=0;$i75<$count;$i75++) for($i76=0;$i76<$count;$i76++) { if(md5(md5($salt).md5($GTFO[$i70].$GTFO[$i71].$GTFO[$i72].$GTFO[$i73].$GTFO[$i74].$GTFO[$i75].$GTFO[$i76])) == $hash) { writetofile("$hash : ".$GTFO[$i70].$GTFO[$i71].$GTFO[$i72].$GTFO[$i73].$GTFO[$i74].$GTFO[$i75].$GTFO[$i76],$salt); $found = 1; break; } if($stealth == 1) usleep(1); } //----------------------------------------------8-------------------------------------------------- if($found != 1) for($i80=0;$i80<$count;$i80++) for($i81=0;$i81<$count;$i81++) for($i82=0;$i82<$count;$i82++) for($i83=0;$i83<$count;$i83++) for($i84=0;$i84<$count;$i84++) for($i85=0;$i85<$count;$i85++) for($i86=0;$i86<$count;$i86++) for($i87=0;$i87<$count;$i87++) { if(md5(md5($salt).md5($GTFO[$i80].$GTFO[$i81].$GTFO[$i82].$GTFO[$i83].$GTFO[$i84].$GTFO[$i85].$GTFO[$i86].$GTFO[$i87])) == $hash) { writetofile("$hash : ".$GTFO[$i80].$GTFO[$i81].$GTFO[$i82].$GTFO[$i83].$GTFO[$i84].$GTFO[$i85].$GTFO[$i86].$GTFO[$i87],$salt); $found = 1; break; } if($stealth == 1) usleep(1); } //----------------------------------------------9-------------------------------------------------- if($found != 1) for($i90=0;$i90<$count;$i90++) for($i91=0;$i91<$count;$i91++) for($i92=0;$i92<$count;$i92++) for($i93=0;$i93<$count;$i93++) for($i94=0;$i94<$count;$i94++) for($i95=0;$i95<$count;$i95++) for($i96=0;$i96<$count;$i96++) for($i97=0;$i97<$count;$i97++) for($i98=0;$i98<$count;$i98++) { if(md5(md5($salt).md5($GTFO[$i90].$GTFO[$i91].$GTFO[$i92].$GTFO[$i93].$GTFO[$i94].$GTFO[$i95].$GTFO[$i96].$GTFO[$i97].$GTFO[$i98])) == $hash) { writetofile("$hash : ".$GTFO[$i90].$GTFO[$i91].$GTFO[$i92].$GTFO[$i93].$GTFO[$i94].$GTFO[$i95].$GTFO[$i96].$GTFO[$i97].$GTFO[$i98],$salt); $found = 1; break; } if($stealth == 1) usleep(1); } //----------------------------------------------10------------------------------------------------- if($found != 1) for($i100=0;$i100<$count;$i100++) for($i101=0;$i101<$count;$i101++) for($i102=0;$i102<$count;$i102++) for($i103=0;$i103<$count;$i103++) for($i104=0;$i104<$count;$i104++) for($i105=0;$i105<$count;$i105++) for($i106=0;$i106<$count;$i106++) for($i107=0;$i107<$count;$i107++) for($i108=0;$i108<$count;$i108++) for($i109=0;$i109<$count;$i109++) { if(md5(md5($salt).md5($GTFO[$i100].$GTFO[$i101].$GTFO[$i102].$GTFO[$i103].$GTFO[$i104].$GTFO[$i105].$GTFO[$i106].$GTFO[$i107].$GTFO[$i108].$GTFO[$i109])) == $hash) { writetofile("$hash : ".$GTFO[$i100].$GTFO[$i101].$GTFO[$i102].$GTFO[$i103].$GTFO[$i104].$GTFO[$i105].$GTFO[$i106].$GTFO[$i107].$GTFO[$i108].$GTFO[$i109],$salt); $found = 1; break; } if($stealth == 1) usleep(1); } //----------------------------------------------END------------------------------------------------ if($found == 0) writetofile("$hash : hash not found"); } function writetofile($string,$string2) { $file = fopen("Cracked.txt", "a") or die("error"); fwrite($file, "salt : ".$string2."\n"); fwrite($file, $string."\n"); fclose($file); } ?>
Thursday, November 25, 2010
Md5(md5(salt)+md5(password)) Bruteforcer
Labels:
brute force,
md5
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment