SecuriTeam - Cryptonite - Password Generator and Brute Force

Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus

Ask the Team
Mailing Lists
Advertising Info
Advisories
About SecuriTeam
Blogs

Brought to you by:

Suppliers of:

SecuriTeam in Your Inbox

New vulnerability?
New tool?
Tell us
(Our PGP key).

CanSecWest 2012

2nd Annual Cyber Security

Hack In Paris

Credit:
The information has been provided by Carlos Carvalho .
To keep updated with the tool visit the project's homepage at: http://nutshell.gotfault.net/tools/cryptonite/cryptonite.html

Website Security Scan	Code Vulnerability Test	Network Assessment Tool
Detect hidden vulnerabilities	Exhaustive automated testing	Real-time, continuous security
Get guidance from professionals	of internal or 3rd party code.	scanning for your entire network

Protect your website!
Use an External Vulnerability Scanner!
Nothing to install. First report in 1 hour!
www.beyondsecurity.com/vulnerability-scanner

Cryptonite written by nuTshell

Criptonite can do things like:
* Encrypt single password from command line;
* Encrypt clear text passwords from text file;
* Brute force encrypted password taking clear text passwords from text file

Example:
root@scarface:/home/hash/security/tools/cryptonite# tail -1 /etc/shadow
test:$1$rOp0rYgu$AEX89iDMflYwnN.d51/ng1:12993:0:99999:7:::
root@scarface:/home/hash/security/tools/cryptonite# logout
hash@scarface:~/security/tools/cryptonite$ cat wordlist.txt
linuxRuleZ
hiyou
mI|NuJ3CS6bv
hello_world
lixo
Q!eQi:mVy
hackm3
changepasswordS
hash@scarface:~/security/tools/cryptonite$ ./cryptonite.pl -decrypMD5
'$1$rOp0rYgu$AEX89iDMflYwnN.d51/ng1' wordlist.txt
[*] Testing: linuxRuleZ
[*] Testing: hiyou
[*] Testing: mI|NuJ3CS6bv
[*] Testing: hello_world

[:)] HACK HACK HACK lalalalala
[!] $1$rOp0rYgu$AEX89iDMflYwnN.d51/ng1 cracked password is: hello_world
Execution time: 0s

Tool:
#!/usr/bin/perl
#
# Cryptonite written by nuTshell
# http://nutshell.gotfault.net
#
# Description: Cryptonite is [encrypter/decrypter<->password generator]
# Supported Algorithms are MD5 and SHA.
# Criptonite can do things like:
# -Encrypt single password from command line;
# -Encrypt cleartext passwords from textfile;
# -Decrypt encrypted password taking cleartext passwords from textfile
#
# eg. MD5 decryption:
#
# # cat /etc/shadow |grep ^test
# test:$1$B0Z/2qHu$ukj7EmMbRC7NsT5UwlPLm1:12992:0:99999:7:::
# $ ./cryptonite.pl -decrypMD5 '$1$B0Z/2qHu$ukj7EmMbRC7NsT5UwlPLm1' wordlist
# [*] Testing: testing
# [*] Testing: areyouok
# [*] Testing: aracnophobia
# [*] Testing: kern3ltest1ng
# [*] Testing: hithere
# [*] Testing: hackme
#
# [:)] HACK HACK HACK lalalalala
# [!] $1$B0Z/2qHu$ukj7EmMbRC7NsT5UwlPLm1 cracked password is: hackme
# Execution time: 0 ms
# $
#
# eg. SHA creation of single password:
#
# $ ./cryptonite.pl -SHA hithere
# Algorithm: SHA
# nb1o8FrXI7iAQ
# $
#
# TIP: You could use gen.pl <http://nutshell.gotfault.net/geni/gen.html>
# to create wordlists!
#
# IMPORTANT 1: When inserting encrypted passwords from command line ALWAYS
# use (') single quotations marks.. ALWAYS!!!!
# IMPORTANT 2: If you use wordlists out there make sure to
# make it be "ASCII text" not any other type nor "ASCII English text, with CRLF line terminators"
# use utility "dos2unix" for that:
# $ dos2unix wordlist.txt
#
# To do: support for more ciphers.
#
# For usage help just type: ./cryptonite.pl
#
# Greets to all of friends out there
#
use strict;
use warnings;
use Term::ANSIColor;

my $x;
my $endtime;
my $cleartext;
my @array =
split(",","a,b,c,d,e,f,g,h,i,j,l,m,n,o,p,q,r,s,t,u,v,x,z,y,w,k");
my $salts = 2; #you can increase it but never decrease

sub usage() {
die <<EOF

Cryptonite written by nuTshell
password[generator/cracker]

Usage: $0 [-MD5|-SHA|]
Options:
-MD5 [passfrase|-input {input_file}{output_file}]
-SHA [passfrase|-input {input_file}{output_file}]
-decrypMD5 ['cripted_password' wordlist_file]
-decrypSHA ['cripted_password' wordlist_file]
EOF
}

sub crypmeMD5 () {
my $cleartext = $ARGV[1];
         if ($cleartext eq "-input") {
                 my $inputfile = $ARGV[2] or &usage;
                 my $outputfile = $ARGV[3] or &usage;
                 open(INPUT, "<$inputfile") or die "$!\n";
                 open(ZERO,">$outputfile") or die "$!\n";
                 print(ZERO "Algorithm: MD5\n\n");
                 close(ZERO);
                 open(OUTPUT,">>$outputfile");
                 printf("Algorithm: MD5\n");
                 foreach my $outline (<INPUT>) {
                   for(1..$salts) {
                         my $array = $array[rand(@array)] ;
                         $x .= $array;
                   }
                   chomp($outline);
                   my $pass = crypt($outline,"\$1\$$x");
                   chomp($outline);chomp($pass);
                   print(OUTPUT "$outline : $pass\n");
                   print("$outline : $pass\n");
                   $x = "";
               }
         }
         else {
                 for(1..$salts) {
                         my $array = $array[rand(@array)] ;
                         $x .= $array;
                 }
                my $pass = crypt($cleartext,"\$1\$$x");
                printf("Algorithm: MD5\n");
                 print "$pass\n"
         }

}

sub crypmeSHA () {
my $cleartext = $ARGV[1];
        if ($cleartext eq "-input") {
                my $inputfile = $ARGV[2] or &usage;
                my $outputfile = $ARGV[3] or &usage;
                open(INPUT, "<$inputfile") or die "$!\n";
                open(ZERO,">$outputfile") or die "$!\n";
                print(ZERO "Algorithm: SHA\n\n");
                close(ZERO);
                open(OUTPUT,">>$outputfile");
                printf("Algorithm: SHA\n");
                foreach my $outline (<INPUT>) {
                    for(1..$salts) {
                        my $array = $array[rand(@array)] ;
                        $x .= $array;
                    }
                    my $pass = crypt($outline,"$x");
                    chomp($outline);chomp($pass);
                    print(OUTPUT "$outline : $pass\n");
                    print("$outline : $pass\n");
                    $x = "";
                }
        }
        else {
                for(1..$salts) {
                        my $array = $array[rand(@array)] ;
                        $x .= $array;
                }
                my $pass = crypt($cleartext,"$x");
                printf("Algorithm: SHA\n");
                print "$pass\n"
        }

}

sub decrypMD5() {
my $pass_to_crack = $ARGV[1] or die &usage;
my $inputpassfile = $ARGV[2] or die &usage;
open(INPUT, "<$inputpassfile") or die "$!\n";
my $begintime = $^T;
        foreach my $try (<INPUT>) {
                chomp($try);
                my $check = crypt($try,$pass_to_crack);
                chomp($try);
                printf("[*] Testing: $try\n");
                if ($check eq $pass_to_crack) {
                                printf("\n[:)] HACK HACK HACK lalalalala\n");
                                 printf("[!] $pass_to_crack cracked password is: ");
                                printf color('bold');
                                printf("$try\n");
                                printf color('reset');
                                $endtime = time;
                                print "Execution time: ", $endtime - $begintime, " ms\n";
                                exit(0);
                        }
        }
        $endtime = time;
        printf("\nNo passwords cracked. Better luck next time.\n");
        print "Execution time: ", $endtime - $begintime, " ms\n";
}

sub decrypSHA() {
my $pass_to_crack = $ARGV[1] or die &usage;
my $inputpassfile = $ARGV[2] or die &usage;
open(INPUT, "<$inputpassfile") or die "$!\n";
my $begintime = $^T;
         foreach my $try (<INPUT>) {
                 my $check = crypt($try,$pass_to_crack);
                 chomp($try);
                 printf("[*] Testing: $try\n");
                 if ($check eq $pass_to_crack) {
                                 printf("\n[:)] HACK HACK HACK lalalalala\n");
                                 printf("[!] $pass_to_crack cracked password is: ");
                                 printf color('bold');
                                 printf("$try\n");
                                 printf color('reset');
                                 $endtime = time;
                                 print "Execution time: ", $endtime - $begintime, "s\n";
                                 exit(0);
                  }
         }
         $endtime = time;
         printf("\nNo passwords cracked. Better luck next time.\n");
         print "Execution time: ", $endtime - $begintime, " ms\n";
}

my %cmd = (
         "-MD5" => \&crypmeMD5,
        "-decrypMD5" => \&decrypMD5,
         "-SHA" => \&crypmeSHA,
        "-decrypSHA" => \&decrypSHA,
         "-help" => \&usage,
);
     chomp(my $string = $ARGV[0]);
     if ($cmd{$string}) {
         $cmd{$string}->();
     } else {&usage}
#eof

blog comments powered by Disqus

	Apache mod_rewrite Vulnerability PoC
	netsniff-ng - A Linux Network Analyzer and Networking Toolkit
	Simple Local File Inclusion Exploiter
	NiX A Linux Brute Forcer
	Nchop - A TCP Session Splicing Tool Used to Rvade Intrusion Detection Systems
	Netifera - Modular Open Source Platform for Security Tools
	WarVOX - Tools for Exploring, Classifying, and Auditing Telephone Systems
	Webshag - Web Server Audit Tool
	Browser Fuzzer
	FSpy - Linux Filesystem Activity Monitoring
	telnetrecon - Telnet Recon
	Zerowine Sandbox
	JPEG Fuzzer
	VNC Server Fuzzer
	RSH Fuzzer