jevinskie/findmyhash

Automatically exported from code.google.com/p/findmyhash

findmyhash's Issues

Shebang

Tiny patch to add #!/usr/bin/env to the top of the script

Original issue reported on code.google.com by [email protected] on 21 Mar 2012 at 10:58

Attachments:

• shebang.patch

Pause & resume

Proposes to add a function to pause or resume the script.

Original issue reported on code.google.com by [email protected] on 17 Nov 2011 at 9:48

Update from ./findmyhash.py

i hope findmyhash can update manual from konsole, maybe like:
svn up or maybe "./findmyhas.py -U" (like update application on youtube-dl) 
thanks

Original issue reported on code.google.com by [email protected] on 26 Mar 2012 at 6:02

Feature request: Support to decode Cisco VPN hash from PCF file.

I noticed that a site is providing the ability to decrypt the encoded Group 
Password or Preshared key inside of a Cisco IPSEC VPN Client PCF file. Would it 
be possible to add this functionality in FindMyHash?

site for decoding
http://www.unix-ag.uni-kl.de/~massar/bin/cisco-decode

a sample PCF file

file sample.pcf
**********
[main]
Description=Connect to Company VPN
Host=your-vpn-server.example.com
AuthType=1
GroupName=testgroupname
GroupPwd=
enc_GroupPwd=9196FE0075E359E6A2486905A1EFAE9A11D652B2C588EF3FBA15574237302B74C19
4EC7D0DD16645CB534D94CE85FEC4
EnableISPConnect=0
ISPConnectType=0
ISPConnect=
ISPCommand=
Username=
SaveUserPassword=0
UserPassword=
enc_UserPassword=
NTDomain=CorpDomain
EnableBackup=0
BackupServer=
EnableMSLogon=1
MSLogonType=1
EnableNat=1
CertStore=0
CertName=
CertPath=
CertSubjectName=
CertSerialHash=00000000000000000000000000000000
DHGroup=2
ForceKeepAlives=0
PeerTimeout=90

Original issue reported on code.google.com by [email protected] on 9 Mar 2012 at 7:46

Patch for /trunk/findmyhash.py

New function - save result to a file

Original issue reported on code.google.com by [email protected] on 20 Nov 2011 at 10:41

Attachments:

• findmyhash.py.patch

Cracked strings with some white spaces are listed wrong in the final summary

What steps will reproduce the problem?
1. MD5("123 456") = 39c278294f0267d0cb2b414be79f5f13
2. $ python findmyhash.py md5 -h 39c278294f0267d0cb2b414be79f5f13

What is the expected output? What do you see instead?

Expected output is:
-------------------

[...]
***** HASH CRACKED!! *****
The original string is: 123 456


The following hashes were cracked:
----------------------------------

39c278294f0267d0cb2b414be79f5f13 -> 123 456


Actual output is:
-----------------

[...]
***** HASH CRACKED!! *****
The original string is: 123 456


The following hashes were cracked:
----------------------------------

39c278294f0267d0cb2b414be79f5f13 -> 456

Original issue reported on code.google.com by [email protected] on 4 Oct 2011 at 9:36

Save the results of cracked and uncracked hashes into a file in the same order like the input-file

let me explain, what i mean: i have a csv-file full of md5-hashes and now i 
want to crack them. i put all hashes into a txt file to crack them with your 
tool. after this progress i got all cracked hashes. but how can i allocate them 
to my csv-file? the solution: your tool saves the cracked _and_ the UNcracked 
MD5's in the same order like the hashes.txt-file to an txt, like this:

c1f6c774381aa2772c646f88a696ccca -> password
f7a47226f26c1c13fa9ebda07a4365b1  X password
42b0303ac1a0c82ad6c433c6d79cbdf3 -> password
24bda7b4385ab3a219f21f11097cc31d  X NOT CRACKED!
299e8f6bccc5ef34007f2a9491180e3f -> password
85810c4881d68537f649602cce721188 -> password
bf4a3b77c4a7eea88954fc7edafb1cb9  X NOT CRACKED!
b12bf79ec516e371604a2fc16188f29c  X NOT CRACKED!
18fbaa6370f19484dbbe1cf0ba2cf35d -> password
00b86e77b9f76fc1f466555b6af345f8 -> password
16c6c8572ed83d84f35ccd863fce6981 -> password

That would be awesome.
Thanks!

Original issue reported on code.google.com by [email protected] on 30 Mar 2012 at 4:13

Doesn't crack hashes of an empty string, ""

What steps will reproduce the problem?
python findmyhash.py SHA1 -h da39a3ee5e6b4b0d3255bfef95601890afd80709

What is the expected output? 
Expected output:
http://www.sha1-lookup.com/index.php?q=da39a3ee5e6b4b0d3255bfef95601890afd80709

da39a3ee5e6b4b0d3255bfef95601890afd80709 is the result of sha1("").  


What do you see instead?

[findMyHash] $ python findmyhash.py SHA1 -h 
da39a3ee5e6b4b0d3255bfef95601890afd80709

Cracking hash: da39a3ee5e6b4b0d3255bfef95601890afd80709

Analyzing with stringfunction (http://www.stringfunction.com)...
... hash not found in stringfunction

Analyzing with sans (http://isc.sans.edu)...
... hash not found in sans

Analyzing with goog.li (http://goog.li)...
... hash not found in goog.li

Analyzing with rednoize (http://md5.rednoize.com)...
... hash not found in rednoize

Analyzing with hashcrack (http://hashcrack.com)...
... hash not found in hashcrack

Analyzing with askcheck (http://askcheck.com)...
... hash not found in askcheck

Analyzing with nicenamecrew (http://crackfoo.nicenamecrew.com)...
... hash not found in nicenamecrew

Analyzing with sha1-lookup (http://sha1-lookup.com)...
... hash not found in sha1-lookup


The following hashes were cracked:
----------------------------------

NO HASH WAS CRACKED.


What version of the product are you using? On what operating system?
findmyhash.py 1.1.2
Mac OS X 10.7.2
Python 2.7.1

Please provide any additional information below.

This is not only the case for sha1, it's also the case for md5 and probably 
more, I didn't check everything.  It may be worth it just to hardcode these in, 
since parsing that may be annoying.  Just my 2cents.

Original issue reported on code.google.com by [email protected] on 9 Nov 2011 at 6:58

All sites up und working?

Please verify that all websites you use for analyzing the hashes are still 
available and working, before you release 2.0

Other ideas:
- add more websites
- change the order of the websites from best to worst: if the best websites 
come first, the hole process of analyzing will be shorter. :)

Great tool! Keep on the good work!

Original issue reported on code.google.com by [email protected] on 30 Mar 2012 at 4:03

Patch to directly find and crack hashes listed on a website

What steps will reproduce the problem?
1. I made some changes to the source code which was useful to me.  I added in 
the option to be able to load from a url.  I added the regex for md5 and sha1.  
This will make it easy to perform crack the hashes listed on a website (e.g. 
pastebin) without having to bother with the formatting of the page.

What is the expected output? What do you see instead?
Below are the new commands which I have added
   -> Try to crack hashes on a webpage
      python %s MD5 -u http://pastebin.com/ddWYY634
      python %s SHA1 -u http://pastebin.com/1YbcH2k5

What version of the product are you using? On what operating system?
1.1.2

Please provide any additional information below.

Original issue reported on code.google.com by [email protected] on 24 Jan 2012 at 3:56

Attachments:

• findmyhash.patch

Service addition

It's possible to easily add the LM Cracking service at 
https://www.objectif-securite.ch/en/products.php#demo

The following python function will return the hash from this service:

import urllib2,re
def gethash(lmnthash) :
    preurl="https://www.objectif-securite.ch/en/products.php?hash="
    posturl="#demo"
    #requires hash in format lm:nt or just lm
    url=preurl+lmnthash+posturl
    ret=urllib2.urlopen(url).read()
    ret=ret.split('\n')
    passline=[line for line in ret if 'assword' in line][-3]
    passwd=re.findall("<b>[^<]*</b>",passline)[1][3:-4]
    return passwd

Original issue reported on code.google.com by [email protected] on 28 Apr 2012 at 1:06

Rejection of course unbreakable hash

It is proposed to reject the invalid hash, for example MD5 hash varying in 
different length of 32 characters.

Original issue reported on code.google.com by [email protected] on 17 Nov 2011 at 9:41

I was made video tutorial here

My name is c0d3HitLER
I am from Indonesia, I was made video tutorial how to use findmyhash.py and 
findmyhash.com here :
http://kopastuntas.wordpress.com/2011/09/29/online-crack-password-hash-using-fin
dmyhash-py/
Hope u enjoy it :)

Original issue reported on code.google.com by [email protected] on 12 Dec 2011 at 9:39