ekultek/dagon

Advanced Hash Manipulation

Dagon - Advanced Hash Manipulation

Named after the prince of Hell, Dagon (day-gone) is an advanced hash cracking and manipulation system, capable of bruteforcing multiple hash types, creating bruteforce dictionaries, automatic hashing algorithm verification, random salt generation from Unicode to ASCII, and much more.

Screenshots

Bruteforcing made easy with a built in wordlist creator if you do not specify one. The wordlist will create 100,000 strings to use

Verify what algorithm was used to create that hash you're trying to crack. You can specify to view all possible algorithms by providing the -L flag (some algorithms are not implemented yet)

Random salting, unicode random salting, or you can make your own choice on the salt.

Demo video

Download

Preferable you can close the repository with git clone https://github.com/ekultek/dagon.git alternatively you can download the zip or tarball here

Basic usage

For full functionality of Dagon please reference the homepage here or the user manual

python dagon.py -h This will run the help menu and provide a list of all possible flags

python dagon.py -c <HASH> --bruteforce This will attempt to bruteforce a given hash

python dagon.py -l <FILE-PATH> --bruteforce This will attempt to bruteforce a given file full of hashes (one per line)

python dagon.py -v <HASH> This will try to verify the algorithm used to create the hash

python dagon.py -V <FILE-PATH> This will attempt to verify each hash in a file, one per line

Installation

Dagon requires python version 2.7.x to run successfully.

• git clone https://github.com/ekultek/dagon.git
• cd Dagon
• pip install -r requirements.txt

This should install all the dependencies that you will need to run Dagon

Contributions

All contributions are greatly appreciated and helpful. When you contribute you will get your name placed on the homepage underneath contributions with a link to your contribution. You will also get massive respect from me, and that's a pretty cool thing. What I'm looking for in contributions is some of the following:

• Hashing algorithm creations, specifically; A quicker MD2 algorithm, full Tiger algorithms, Keychain algorithms for cloud and agile
• More wordlists to download from, please make sure that the link is encoded
• Rainbow table attack implementation
• More regular expressions to verify different hash types

dagon's Issues

Hash guarantee ($P$V1GoRM)

Dagon has failed to crack given hash: $P$V1GoRMlq$QKBbTAkBaHkZRcxMchjfe0.

This was attempted on 2017-08-13 16:25:20.685630..

Commands that were used during failure:
['dagon.py', '-c', '$P$V1GoRMlq$QKBbTAkBaHkZRcxMchjfe0', '--bruteforce', '-D', 'downloads']

Algorithm attempted: None

Hash guarantee (b2/dvlx3d)

Dagon has failed to crack given hash: b2/dvlx3dJGkGYKSbBbLOTOhzqj8xQ2krOtu2QkHNeJiYTC0B/ji.

This was attempted on 2017-08-11 15:58:48.399224..

Commands that were used during failure:
['dagon.py', '-c', 'b2/dvlx3dJGkGYKSbBbLOTOhzqj8xQ2krOtu2QkHNeJiYTC0B/ji', '--bruteforce', '-w', '/usr/share/dict/american-english', '--verbose']

Algorithm attempted: None

Create a way to see if the algorithm is implemented or not during verification

I think it would be useful to create a way to see if the algorithm is implemented or not during a verification run, for example:

---------------------------------------------------------------------------
[+] Most Likely Hash Type(s):
---------------------------------------------------------------------------
[+] MD5
[+] MD4
[+] MD2
---------------------------------------------------------------------------
[-] Least Likely Hash Type(s)(possibly not implemented):
---------------------------------------------------------------------------
[-] NTLM
[-] POSTGRESQL
[-] MD5(MD5(PASS)+MD5(SALT))
[-] MD5(MD5(PASS))
[-] MD5(SALT+PASS+SALT)
[-] RIPE128 (not implemented yet)
[-] HAVAL128 (not implemented yet)
[-] TIGER128 (not implemented yet)
[-] SKEIN256(128) (not implemented yet)
[-] SKEIN512(128) (not implemented yet)
[-] SKYPE (not implemented yet)
[-] ZIPMONSTER (not implemented yet)
[-] PRESTASHOP (not implemented yet)
---------------------------------------------------------------------------

This could fix some confusion on what can and cannot be run by this application

Hash guarantee (234523432)

Dagon has failed to crack given hash: 234523432423423423423.

This was attempted on 2017-08-16 12:30:29.550981..

Commands that were used during failure:
['dagon.py', '-c', '234523432423423423423', '--bruteforce']

Algorithm attempted: None

Hash guarantee ()

Dagon has failed to crack given hash: 'test'.

Hash guarantee (234523432)

Dagon has failed to crack given hash: 234523432423423423423.

This was attempted on 2017-08-16 12:31:25.571974..

Commands that were used during failure:
['dagon.py', '-c', '234523432423423423423', '--bruteforce']

Algorithm attempted: None

Hash guarantee ($TNT$098f)

Dagon has failed to crack given hash: '$TNT$098f6bcd4621d373cade4e832627b4f6$TNT$'.

This was attempted on 2017-08-10 13:09:53.826931..

Hash guarantee (098f6bcd4)

Dagon has failed to crack given hash: '098f6bcd4621d373cade4e832627b4f6$TNT$'.

Hash guarantee (DELtw.CG9)

Dagon has failed to crack given hash: DELtw.CG9Db.pOYgP4K.VbDiI4W3gfCmhhMi9Dxpsg2.

This was attempted on 2017-09-22 23:26:29.161485..

Commands that were used during failure:
['dagon.py', '-v', 'DELtw.CG9Db.pOYgP4K.VbDiI4W3gfCmhhMi9Dxpsg2']

Algorithm attempted: None

Hash guarantee (.aiPOIXET)

Dagon has failed to crack given hash: .aiPOIXET9GG/.

This was attempted on 2017-08-11 18:08:05.690794..

Commands that were used during failure:
['dagon.py', '-c', '.aiPOIXET9GG/', '--bruteforce', '-w', '/usr/share/dict/american-english']

Algorithm attempted: None

Hash guarantee ($TNT$098f)

Dagon has failed to crack given hash: '$TNT$098f6bcd4621d373cade4e832627b4f6$TNT$'.

This was attempted on 2017-08-10 13:09:05.071689 at 13:09:05.

Hash guarantee (234523432)

Dagon has failed to crack given hash: 234523432423423423423.

This was attempted on 2017-08-16 12:30:05.390369..

Commands that were used during failure:
['dagon.py', '-c', '234523432423423423423', '--bruteforce']

Algorithm attempted: None

Hash guarantee ($TNT$098f)

Dagon has failed to crack given hash: '$TNT$098f6bcd4621d373cade4e832627b4f6$TNT$'.

This was attempted on 2017-08-10 13:16:17.746607..

Issue with --update

Issue/idea:

Running command --update gives error.

Any idea what caused this to happen?

No

Application running specifics:

• Installation method?
  Cloned in /root/dagon

• Operating system and architecture:
  Latest Kali 64 bit

• Dagon version information:
  v1.12.24.43(dev)

Exact error message:

python dagon.py --update
Dagon .. Advanced Hash Manipulation v1.12.24.43(dev)
Clone: https://github.com/ekultek/dagon.git

[23:19:34 INFO] Update in progress..
Traceback (most recent call last):
File "dagon.py", line 180, in
update_status = update_system()
File "/root/dagon/lib/settings.py", line 355, in update_system
updater = subprocess.check_output("git pull origin master")
File "/usr/lib/python2.7/subprocess.py", line 212, in check_output
process = Popen(stdout=PIPE, *popenargs, **kwargs)
File "/usr/lib/python2.7/subprocess.py", line 390, in init
errread, errwrite)
File "/usr/lib/python2.7/subprocess.py", line 1024, in _execute_child
raise child_exception
OSError: [Errno 2] No such file or directory

Hash guarantee (test)

Dagon has failed to crack given hash: 'test'.

This was attempted on 2017-08-10 13:59:26.316134..

Commands that were used during failure:
['dagon.py', '-c', 'test', '--bruteforce']

Error in md2_hash.py prevents any operations from starting. Python 3.6.1

Encountered on a fully-patched 64-bit Windows 10 system with Python 3.6.1 (and only that version).

The installation process provided on Github was followed for the package: clone the repo then use pip to install dependencies.

No errors are returned when pip runs.

Any command issued to dagon,py returns the same error, shown below.

c:\temp\dagon>python dagon.py -h
Traceback (most recent call last):
  File "dagon.py", line 7, in <module>
    from bin.attacks.bruteforce.bf_attack import bruteforce_main
  File "c:\temp\dagon\bin\attacks\bruteforce\bf_attack.py", line 5, in <module>
    from lib.settings import FUNC_DICT
  File "c:\temp\dagon\lib\settings.py", line 7, in <module>
    from lib.algorithms.hashing_algs import *
  File "c:\temp\dagon\lib\algorithms\hashing_algs.py", line 4, in <module>
    from thirdparty.md2 import md2_hash
  File "c:\temp\dagon\thirdparty\md2\md2_hash.py", line 150
    print md2h(readchars(f)) + "\t" + name
             ^
SyntaxError: invalid syntax

Hash guarantee (Z2gK8uGaO)

Dagon has failed to crack given hash: Z2gK8uGaOuw+1yaWMJuA7unso7UDKY3NSmWIDW8oikc=.

This was attempted on 2017-09-28 17:48:00.747784..

Commands that were used during failure:
['dagon.py', '-v', 'Z2gK8uGaOuw+1yaWMJuA7unso7UDKY3NSmWIDW8oikc=']

Algorithm attempted: None

Unhandled Exception HTTPError(PcZnz)

Exception:
HTTPError
Issue data: ('()', '')

Running detail:
OS: Linux-4.10.0-32-generic-x86_64-with-Ubuntu-17.04-zesty
Hash used: 2237a2260e9438e14e8bced36f6cbcf4
CMD args: ['./dagon.py', '-c', '2237a2260e9438e14e8bced36f6cbcf4', '--bruteforce', '-D', 'downloads']

Hashing algorithms to be implemented

These hashes will be implemented before version 2.0. If you have any ideas on hashes that I should implement, make a comment here with the hash type and an example of the hash if possible

• SSHA c24a9ee
• MsSQL 2005 e603286
• MsSQL 2000 4e21e61
• PostgreSQL e603286
• Wordpress
• NTLM c24a9ee
• Scrypt
• DSA -> possible - #3 (comment)
• Oracle10g e21f68c
• Oracle11g e21f68c
• CRC64 #30
• Haval-160
• Tiger-160

Special algorithms to be implemented (no time frame on these)

• md5(md5(md5(pass)))
• md5(md5(md5(pass))) : salt
• md5(md5(salt)md5(pass)) : salt
• half md5(md5(md5(pass)))
• sha1(sha1(sha1(pass))) -> possible - #3 (comment) b91f20c
• sha1(sha1(sha1(pass))) : salt -> possible - #3 (comment) b91f20c
• sha1(sha1(salt)sha1(pass)) : salt
• half sha1(sha1(sha1(pass)))

Regular expressions to verify the hash

• SSHA -> ^{[^{}]*}[a-zA-Z0-9][\w/-]+=?$
• MsSQL 2005 -> ^0x0100[a-f0-9]{54}$
• MsSQL 2000 -> ^0x0100[a-f0-9]\w{87}$
• PostgreSQL -> ^(md5)?[a-f0-9]{32}$
• Wordpress -> ^$[\w.]{1}$\w+$\S{22}$ ^\$\w+\$\w+(\$)?\w+(.)?$ -> test #3 (comment)
• NTLM
  • full hash -> ^\w+:\d+:[a-z0-9]{32}:[a-z0-9]{32}:::$
  • just ntlm hash -> ^(md5)?[a-f0-9]{32}$
• Scrypt -> (c2NyeXB0AA4AAAAIAAAAA)?\w+(/)?(//)?\w+(/)?\w+(/)?\w+(/)?\w+(/?)\w+(w+)?.. -> test #3 (comment)
• DSA -> ^[a-f0-9]{40}(:.+)?$
• Oracle10g -> ^[a-f0-9]{16}(:.+)?$
• Oracle11g -> ^S:[a-zA-Z0-9]{60}$
• CRC64 ^(0x)?[a-f0-9]{16}(L)?$
• Haval-160 -> ^[a-f0-9]{40}(:.+)?$
• Tiger-160 -> ^[a-f0-9]{40}(:.+)?$

Hash guarantee (b2/dvlx3d)

Dagon has failed to crack given hash: b2/dvlx3dJGkGYKSbBbLOTOhzqj8xQ2krOtu2QkHNeJiYTC0B/ji.

This was attempted on 2017-08-11 15:25:04.434747..

Commands that were used during failure:
['dagon.py', '-c', 'b2/dvlx3dJGkGYKSbBbLOTOhzqj8xQ2krOtu2QkHNeJiYTC0B/ji', '--bruteforce', '-w', '/usr/share/dict/american-english']

Algorithm attempted: None

Hash guarantee (234523432)

Dagon has failed to crack given hash: 234523432423423423423.

This was attempted on 2017-08-16 12:32:48.047331..

Commands that were used during failure:
['dagon.py', '-c', '234523432423423423423', '--bruteforce']

Algorithm attempted: None

Hash guarantee (Z2gK8uGaO)

Dagon has failed to crack given hash: Z2gK8uGaOuw+1yaWMJuA7unso7UDKY3NSmWIDW8oikc=.

This was attempted on 2017-09-28 17:45:51.905675..

Commands that were used during failure:
['dagon.py', '-v', 'Z2gK8uGaOuw+1yaWMJuA7unso7UDKY3NSmWIDW8oikc=']

Algorithm attempted: None

Python 3 print issue

https://github.com/Ekultek/Dagon/blob/master/dagon.py#L240

MD2 algorithm takes up A LOT of CPU usage

MD2 algorithm takes up a ton of CPU, 100% on one of my cores on my machine image:

My assumption is that the issue is probably here:

    def digest(self):
        buf = pad(self.buf, self.digest_size)
        c = list(self.c)
        checksum(c, buf)
        #print "*** checksum after padding = ", hexstr(c)
        d = list(self.d)
        digest(d, buf)
        digest(d, c)
        return d[0:16]

There's a lot of recursion here, so I'm going to look into making the MD2 algorithm much faster.

Hash guarantee (74dfc2b27)

Dagon has failed to crack given hash: 74dfc2b27acfa364da55f93a5caee29ccad3557247eda238831b3e9bd931b01d77fe994e4f12b9d4cfa92a124461d2065197d8cf7f33fc88566da2db2a4d6eae.

This was attempted on 2017-08-20 21:45:39.974704..

Commands that were used during failure:
['dagon.py', '-c', '74dfc2b27acfa364da55f93a5caee29ccad3557247eda238831b3e9bd931b01d77fe994e4f12b9d4cfa92a124461d2065197d8cf7f33fc88566da2db2a4d6eae', '--bruteforce']

Algorithm attempted: None

Hash guarantee ()

Dagon has failed to crack given hash: ``.

This was attempted on 2017-08-13 16:20:55.841384..

Commands that were used during failure:
['dagon.py', '-c', '', '--bruteforce', '-w', '/usr/share/dict/american-english']

Algorithm attempted: None

Hash guarantee (/.6tALckE)

Dagon has failed to crack given hash: /.6tALckEaDdEbF1uA//.

This was attempted on 2017-08-16 12:11:48.002315..

Commands that were used during failure:
['dagon.py', '-c', '/.6tALckEaDdEbF1uA//', '--bruteforce']

Algorithm attempted: None

Hash guarantee (test)

Dagon has failed to crack given hash: test.

This was attempted on 2017-08-10 14:07:40.967819..

Commands that were used during failure:
['dagon.py', '-c', 'test', '--bruteforce', '-w', '/usr/share/dict/american-english']

Algorithm attempted: None

Unhandled Exception (VsDTH)

Exception:
Exception
Issue data: ((), '')

Running detail:
OS: Linux-4.10.0-32-generic-x86_64-with-Ubuntu-17.04-zesty
Hash used: 098f6bcd4621d373cade4e832627b4f6
CMD args: ['dagon.py', '-c', '098f6bcd4621d373cade4e832627b4f6', '--bruteforce']

Hash guarantee (*27D47D48)

Dagon has failed to crack given hash: *27D47D48F5C4982E785A7BB31D471DF945395AAD.

This was attempted on 2017-09-17 09:33:33.594858..

Commands that were used during failure:
['dagon.py', '-c', '*27D47D48F5C4982E785A7BB31D471DF945395AAD', '--bruteforce', '-D', 'downloads']

Algorithm attempted: None

Bcrypt and blowfish

C:\Users\thomas_j_perkins\Documents\bin\python\dagon>python dagon.py -c 098f6bcd4621d373cade4e832627b4f6 --bruteforce -A 500
Dagon .. Advanced Hash Manipulation v1.9.17.29(dev)
Clone: https://github.com/ekultek/dagon.git

[16:34:58 INFO] Checking program integrity...
[*] Starting up at: 1499031305.06..

[16:35:05 INFO] Using algorithm, BLOWFISH..
No handlers could be found for logger "passlib.handlers.bcrypt"
[16:35:07 CRITICAL] User exited process...

raw_input not in python 3.x

ascii decoding issues

baal@baal-Aspire-5733Z:~/bin/python/dagon$ python dagon.py -c 0cb6948805f797bf2a82807973b89537 --bruteforce -w /usr/share/dict/american-english -A 1000
Dagon .. Advanced Hash Manipulation v1.12.26.45(dev)
Clone: https://github.com/ekultek/dagon.git


[*] Starting up at 12:22:55..

[12:22:55 INFO] Reading from, /usr/share/dict/american-english..
[12:22:55 INFO] Using algorithm, NTLM..
[12:22:55 CRITICAL] dagon.py failed with error code: ''ascii' codec can't decode byte 0xc3 in position 6: ordinal not in range(128)'. Creating a wordlist..
[12:22:55 WARNING] It is highly advised to use a dictionary attack over bruteforce. Bruteforce requires extreme amounts of memory to accomplish and it is possible that it could take a lifetime to successfully crack your hash. To run a dictionary attack all you need to do is pass the wordlist switch ('--wordlist PATH') with the path to your wordlist. (IE: --bruteforce --wordlist ~/dicts/dict.txt)
^C[12:22:56 CRITICAL] User exited process...

Hash guarantee ($1$xyz$yU)

Dagon has failed to crack given hash: $1$xyz$yUYjtWk.fSujZmtlKRxlR1.

This was attempted on 2017-08-11 16:03:24.044980..

Commands that were used during failure:
['dagon.py', '-c', '$1$xyz$yUYjtWk.fSujZmtlKRxlR1', '--bruteforce', '-D', 'downloads']

Algorithm attempted: None

Hash guarantee (test)

Dagon has failed to crack given hash: test.

This was attempted on 2017-08-10 14:06:50.789596..

Commands that were used during failure:
['dagon.py', '-c', 'test', '--bruteforce', '-w', '/usr/share/dict/american-english', '-A', '1000']

Algorithm attempted: NTLM

Hash guarantee (.aiPOIXET)

Dagon has failed to crack given hash: .aiPOIXET9GG/.

This was attempted on 2017-08-11 18:09:23.083984..

Commands that were used during failure:
['dagon.py', '-c', '.aiPOIXET9GG/', '--bruteforce', '-w', '/usr/share/dict/american-english']

Algorithm attempted: None

Hash guarantee ({SSHA}AZK)

Dagon has failed to crack given hash: {SSHA}AZKja92fbuuB9SpRlHqaoXxbTc43Mzc2MDM1Ng==.

This was attempted on 2017-08-14 22:17:43.384669..

Commands that were used during failure:
['dagon.py', '-v', '{SSHA}AZKja92fbuuB9SpRlHqaoXxbTc43Mzc2MDM1Ng==']

Algorithm attempted: None

Hash guarantee (test)

Dagon has failed to crack given hash: 'test'.

This was attempted on 2017-08-10 14:05:58.142869..

Commands that were used during failure:
['dagon.py', '-c', 'test', '--bruteforce', '-w', '/usr/share/dict/american-english', '-A', '1000']

Algorithm attempted: ntlm

Hash guarantee ($BLAKE2$2)

Dagon has failed to crack given hash: $BLAKE2$296c269e70ac5f0095e6fb47693480f0f7b97ccd0307f5c3bfa4df8f5ca5c9308a0e7108e80a0a9c0ebb715e8b7109b072046c6cd5e155b4cfd2f27216283b1e.

This was attempted on 2017-08-14 22:19:39.187500..

Commands that were used during failure:
['dagon.py', '-c', '$BLAKE2$296c269e70ac5f0095e6fb47693480f0f7b97ccd0307f5c3bfa4df8f5ca5c9308a0e7108e80a0a9c0ebb715e8b7109b072046c6cd5e155b4cfd2f27216283b1e', '--bruteforce', '-w', 'set_list.lst']

Algorithm attempted: None

Hash Type Issue

0xff2902a2b61535ac9b6d61f82dc2a095
I got this from Password Column with sqlmap (using --binary-fields), What is the Hash Type? if we remove the 0x, it shows MD5, if With it, it shows C4, Can You help me with this regard?

`blowfish_hash` doesn't work

Issue

lib/algorithms/hashing_algs.blowfish_hash doesn't work

Any idea what caused this to happen?

I was reading through the passlib docs when I noticed this line:

Note It is strongly recommended that you install bcrypt when using this hash.

I checked the requirements.txt and bcrypt was not in it.

For more information on the backends used by passlib:

https://passlib.readthedocs.io/en/stable/lib/passlib.hash.bcrypt.html#index-0

• Exact commands used:

# added underneath the imports of `hashing_algs.py`
print bcrypt.hash('test_string')

Exact error message:

MissingBackendError: bcrypt: no backends available -- recommend you install one (e.g. 'pip install bcrypt')

Hash guarantee (234523432)

Dagon has failed to crack given hash: 234523432423423423423.

This was attempted on 2017-08-16 12:24:05.217146..

Commands that were used during failure:
['dagon.py', '-c', '234523432423423423423', '--bruteforce']

Algorithm attempted: None

Hash guarantee (234523432)

Dagon has failed to crack given hash: 234523432423423423423.

This was attempted on 2017-08-16 12:33:52.870842..

Commands that were used during failure:
['dagon.py', '-c', '234523432423423423423', '--bruteforce']

Algorithm attempted: None

Hash guarantee (test)

Dagon has failed to crack given hash: 'test'.

This was attempted on 2017-08-10 13:59:53.840004..

Commands that were used during failure:
['dagon.py', '-c', 'test', '--bruteforce', '-w', '/usr/share/dict/american-english', '-A', '1000']

Compatability with Python version 3.x

Need people to find the non-compatible stuff of the application, I've done my best to make it compatible but i don't know all the differences and such, so please find it for me, thank you.

optparse and python 3.x

To fix this I'm going to do this:

try:
    import optparse
except ImportError:
    import argparse as optparse

Hash guarantee (test)

Dagon has failed to crack given hash: 'test'.

This was attempted on 2017-08-10 13:21:10.003783..

Hash guarantee (234523432)

Dagon has failed to crack given hash: 234523432423423423423.

This was attempted on 2017-08-16 12:37:25.617120..

Commands that were used during failure:
['dagon.py', '-c', '234523432423423423423', '--bruteforce']

Algorithm attempted: None

print needs to be a print function (print(" "))

Hash guarantee (test)

Dagon has failed to crack given hash: 'test'.

This was attempted on 2017-08-10 13:58:27.962185..

Further info:
['dagon.py', '-c', 'test', '--bruteforce']