Where do I get "brute force" password cracker?

Where do I get "brute force" password cracker?

Post by roo » Tue, 21 May 1996 04:00:00



It seems that every Internet search engine I try finds a brute force
cracker named "crack20", but the actual file is not found. Is there
some "good samaritan" out there deleting these useful tools?

I have a legitimate need: a used HP-UX system with a long forgotten
root password. All I have is the encoded string from the passwd
file. Crack 4.1 was not able to crack it.

If someone has the source code for a brute force cracker they are
willing to share, please email me.

Thanks,
Reinhold

 
 
 

Where do I get "brute force" password cracker?

Post by Jacob Langse » Tue, 21 May 1996 04:00:00


Quote:>I have a legitimate need: a used HP-UX system with a long forgotten
>root password. All I have is the encoded string from the passwd
>file. Crack 4.1 was not able to crack it.

If Crack 4.1 was not able to crack it, you should try to expand both the
size of your dictionary and the rules in Scripts/dicts.rules.  Also, it
wouldn't be too difficult to write a short c (or perl) program that will
produce either a brute-force rule set or dictionary (or better yet, have
Crack read directly from this program).

Some url's w/ additional wordlists:
    ftp://coast.cs.purdue.edu/pub/dict/
    ftp://sable.ox.ac.uk/pub/wordlists/

-jwl
--
      /          "Meddle not in the affairs of dragons, for             \
 *}=={*}>======-  thou art crunchy and go well with ketchup."  -======<{*}=={*

    Musashi          - - -=- Finger for PGP key -=- - -             Musashi

 
 
 

Where do I get "brute force" password cracker?

Post by l.. » Wed, 22 May 1996 04:00:00




Quote:

>I have a legitimate need: a used HP-UX system with a long forgotten
>root password. All I have is the encoded string from the passwd
>file. Crack 4.1 was not able to crack it.

The right way to fix this is to boot from another disk (or CDROM or tape),
mount the otherwise root disk, and edit /etc/passwd on that disk.
Alternately, if you have the facility to do so. you could remove the drive
from the machine, mount it on another, and do the same thing.

Once upon a time, a friend and I did (something like) this with the disk
from a Fortune box.
We used Norton on a DOS machine, searched for the string 'root' and found
nothing.  It seems that every two bytes on the disk were swapped.
Searching for 'orto', we found the passwd file.  We plugged in a known
encrypted password, swapping bytes of course, and presto.

Quote:>If someone has the source code for a brute force cracker they are
>willing to share, please email me.

I have such a program.  If you still want it, let me know and I'll send it
along.  If you know how many characters are in the password (unlikely),
you can cut the time down.  I am expecting a search of 5 character
passwords (with a 62 character alphabet) to take over 9 days on a lightly
loaded P100.
Longer passwords will, of course, take exponentially longer.  I wrote this
program to try to generate a vanity password that will spell something
when encrypted with the right salt. 8)  Didn't find anything with 0-4
character passwords.  8)
 
 
 

Where do I get "brute force" password cracker?

Post by Chris Evan » Wed, 22 May 1996 04:00:00



Quote:> I have a legitimate need: a used HP-UX system with a long forgotten
> root password. All I have is the encoded string from the passwd
> file. Crack 4.1 was not able to crack it.

> If someone has the source code for a brute force cracker they are
> willing to share, please email me.

How many years are you prepred to wait, or how many supercomputers do you
have at your disposal?!!!

Break in some other way, if all else fails mount the hard drive under
another system.

Chris.

 
 
 

Where do I get "brute force" password cracker?

Post by Jest » Wed, 22 May 1996 04:00:00



>I have a legitimate need: a used HP-UX system with a long forgotten
>root password. All I have is the encoded string from the passwd
>file. Crack 4.1 was not able to crack it.

Your going about this the entirely wrong way.

Just remove the drive with the rot partition on it, and attach it to
another Unix box, mount the drive, and change the root password by hand.
It will save you a great deal of heartache and time. Of course you have
to have a second Unix box implement this solution.

Chris
--
PGP PUBLIC KEY available upon request
URL: http://www.veryComputer.com/
Sonic-Boom - The Net Industrial/EBM/Goth/*Culture Music Review Zine
"The Bill Of Rights: Void Where Prohibited By Law"

 
 
 

Where do I get "brute force" password cracker?

Post by Mark Rasmusse » Thu, 23 May 1996 04:00:00


If you are trying to recover from a lost root password, can't you just reboot,
bring it up in single user mode and then mount the disk and edit the
password file?  I know IBM's needed a key to be able to bring it up in single
user mode, but the HP's don't.  I upgraded a bunch at school and remember thinking
how insecure it was.  I would try calling HP support - they probably have a fax
on it.  It was quite a common problem when I did tech support for IBM.

Also, if anyone has system access, you can nfs mount a suid program and run that
to become root, or a plethora of other methods (system pretty much equals root).

Laters,
Marx
--
           __    ______________________________________________    __

  \      :|  |::| http://netnow.micron.net/~sunbane            |::|  |:      /
   \     :|  |::| Don't go Away Mad...         Just Go Away!!! |::|  |:     /
   /     :|__|::|______________________________________________|::|__|:     \
  /______:/  \::/                                              \::/  \:______\

 
 
 

Where do I get "brute force" password cracker?

Post by Jack Danie » Fri, 24 May 1996 04:00:00



: > I have a legitimate need: a used HP-UX system with a long forgotten
: > root password. All I have is the encoded string from the passwd
: > file. Crack 4.1 was not able to crack it.
: >
: > If someone has the source code for a brute force cracker they are
: > willing to share, please email me.

: How many years are you prepred to wait, or how many supercomputers do you
: have at your disposal?!!!

: Break in some other way, if all else fails mount the hard drive under
: another system.

: Chris.

Either that, or use a MUCH bigger wordlist.

 
 
 

Where do I get "brute force" password cracker?

Post by Wes Bro » Sat, 25 May 1996 04:00:00


: If you are trying to recover from a lost root password, can't you just reboot,
: bring it up in single user mode and then mount the disk and edit the
: password file?  I know IBM's needed a key to be able to bring it up in single
: user mode, but the HP's don't.  I upgraded a bunch at school and remember thinking
: how insecure it was.  I would try calling HP support - they probably have a fax
: on it.  It was quite a common problem when I did tech support for IBM.

HP has a neat (stupid) feature.  Call up HP with your Model/Serial Number,
and they can tell you the back door into the system.  One of the original
reasons kernel hacking became an interest was to remove that "feature".

Wes
---
Wes Brown

http://prozac.cwru.edu/wes/About.me.html
KB8TGR

 
 
 

Where do I get "brute force" password cracker?

Post by David W Spaldi » Mon, 27 May 1996 04:00:00



Daniels) writes:



>: > I have a legitimate need: a used HP-UX system with a long
forgotten
>: > root password. All I have is the encoded string from the passwd
>: > file. Crack 4.1 was not able to crack it.
>: >
>: > If someone has the source code for a brute force cracker they are
>: > willing to share, please email me.

>: How many years are you prepred to wait, or how many supercomputers
do you
>: have at your disposal?!!!

>: Break in some other way, if all else fails mount the hard drive
under
>: another system.

>: Chris.

>Either that, or use a MUCH bigger wordlist.

Wouldn't it be easier and safer to reinstall the os from cdrom.  That
way you have a "clean" system to work with.
 
 
 

Where do I get "brute force" password cracker?

Post by Mike Sege » Wed, 29 May 1996 04:00:00



> If you are trying to recover from a lost root password, can't you just reboot,
> bring it up in single user mode and then mount the disk and edit the
> Also, if anyone has system access, you can nfs mount a suid program and run that
> to become root, or a plethora of other methods (system pretty much equals root).

Something is fishy with the original post.
If root was lost, then the best way is to crash the system and either
boot single user,
or from an OS tape or CD-Rom.  All  UNIX Systems are vunerable to this.
If you have an
eeprom stored password, you may have to disconnect the battery. But
since this is an
HP, I seem to have digressed.

If you already have system access, then you have root. Set UID programs
have to have
root ownership and have their sticky bits set.

Again, HP tech support can easily walk someone through the boot up
procedure and
help them regain access to their system.

-Mikey

 
 
 

Where do I get "brute force" password cracker?

Post by Michael McQua » Fri, 31 May 1996 04:00:00


: It seems that every Internet search engine I try finds a brute force
: cracker named "crack20", but the actual file is not found. Is there
: some "good samaritan" out there deleting these useful tools?

: I have a legitimate need: a used HP-UX system with a long forgotten
: root password. All I have is the encoded string from the passwd
: file. Crack 4.1 was not able to crack it.

: If someone has the source code for a brute force cracker they are
: willing to share, please email me.

: Thanks,
: Reinhold

--
To get past the root passwd..reboot, escape out of the auto boot search..

When you get to a prompt (is this 10.X or 9.x?) and enter ipl.

When you get the ipl prompt move yourself into single user state..

bypasses..all passwd..

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
                    _
  __    _   _  _   /~)
  \ \  I_I/I-II-I /~/'  Shaka !!!!!!
   \~~\'   `-'`- '~I    Opinions stated here represent me only..
     \_ ) ~\_ /~~ )    
       \_    Y  )'      

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

 
 
 

Where do I get "brute force" password cracker?

Post by BENJAMIN A LINDSTR » Sat, 01 Jun 1996 04:00:00


: : It seems that every Internet search engine I try finds a brute force
: : cracker named "crack20", but the actual file is not found. Is there
: : some "good samaritan" out there deleting these useful tools?
:
: : I have a legitimate need: a used HP-UX system with a long forgotten
: : root password. All I have is the encoded string from the passwd
: : file. Crack 4.1 was not able to crack it.
:
: : If someone has the source code for a brute force cracker they are
: : willing to share, please email me.
:
: : Thanks,
: : Reinhold

:
: --
: To get past the root passwd..reboot, escape out of the auto boot search..
:
: When you get to a prompt (is this 10.X or 9.x?) and enter ipl.
:
: When you get the ipl prompt move yourself into single user state..
:
: bypasses..all passwd..
:
Sure don't work for 9.x HP/UX Apollo 700...(Which I have I also lost a
passwd, and we were never given meduim disk because it was 2nd hand..
UGH!. =)

I refuse to use crack because that would take YEARS for a single password.

 
 
 

Where do I get "brute force" password cracker?

Post by l.. » Sun, 02 Jun 1996 04:00:00





>: To get past the root passwd..reboot, escape out of the auto boot search..
>:
>: When you get to a prompt (is this 10.X or 9.x?) and enter ipl.
>:
>: When you get the ipl prompt move yourself into single user state..
>:
>: bypasses..all passwd..
>:
>Sure don't work for 9.x HP/UX Apollo 700...(Which I have I also lost a
>passwd, and we were never given meduim disk because it was 2nd hand..
>UGH!. =)

>I refuse to use crack because that would take YEARS for a single password.

Ok, you pay shipping both ways and enough to make it worth my time and send
the disk drive to me.  I'll change the root password to something that you
know.  What interface does it have?
        SCSI?
        MFM?
        IDE? (doubtful)
If it's not one of them (ESDI, for instance), you'll have to ship me an
(PC platform (ISA or PCI)  and supported under Linux) interface card (which
I'll return to you) too.  I know that an HP 9000/300 that I have access to
uses SCSI drives, but I don't know about Apollos.

This is not sarcasm, it is a serious offer.  Whether or not you decide to
take me up on it remains to be seen.