BarsWF feature wishlist

Moderator: BarsMonster

kiando
Posts: 64
Joined: Thu Oct 02, 2008 7:30 am
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

BarsWF feature wishlist

Post by kiando » Thu Oct 02, 2008 7:36 am

Great thing to know the author is willing to hear our wishes and improve the program :crazy:

Here are some features that have good effect and cracking speed:
- BarsWF non-distributed stand alone
- enable/disable/limit CPU - usage
- switch between CPU/GPU - usage
- mask attack (define charset for each position)
- JTR mutation rules
- multi hash support (attack a large list of hashes)
Last edited by kiando on Tue Dec 30, 2008 12:15 pm, edited 3 times in total.

User avatar
the_drag0n
Posts: 217
Joined: Thu Oct 02, 2008 6:48 am
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by the_drag0n » Thu Oct 02, 2008 7:38 am

not to forget a BarsWFWPA ;)

kiando
Posts: 64
Joined: Thu Oct 02, 2008 7:30 am
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by kiando » Thu Oct 02, 2008 7:40 am

yes, but perhaps we should create an extra thread for algorithm requests because the features above concern the program itself and not the modules :ugeek:

User avatar
BarsMonster
Site Admin
Posts: 1118
Joined: Wed Oct 01, 2008 7:58 pm
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by BarsMonster » Thu Oct 02, 2008 7:58 am

kiando wrote:Great thing to know the author is willing to hear our wishes and improve the program :crazy:

Here are some features that have good effect and cracking speed:
- mask attack (define charset for each position)
- multi hash support (attack a large list of hashes)
#2 ofcourse for unsalted hashes, right?
For #1, what do you think about JTR rules? :-)

kiando
Posts: 64
Joined: Thu Oct 02, 2008 7:30 am
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by kiando » Thu Oct 02, 2008 8:37 am

#1 JTR Rules would be awesome.
#2 unsalted will suffice. :)

c4p0ne
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by c4p0ne » Mon Oct 06, 2008 6:27 pm

1. Salted hashes including: md5(md5($salt).md5($pass)) - md5(md5($pass).md5($salt)) - md5(md5($pass).salt) - md5(phpBB3)
2. EAPOL WPA & WPA2 support.
3. Support for utilization of ATI Type GPU(s) for accelerated computation, specifically 4870x2 massively paralleled types.
4. GPU acceleration for hybrid type attack on hashes (not sure if this is possible).


It always amazes me how free tools more often then not, outshine their commercial counterparts by leaps and bounds. Great work being done here! :ugeek:

User avatar
BarsMonster
Site Admin
Posts: 1118
Joined: Wed Oct 01, 2008 7:58 pm
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by BarsMonster » Wed Oct 08, 2008 1:00 pm

1. Salted hashes including: md5(md5($salt).md5($pass)) - md5(md5($pass).md5($salt)) - md5(md5($pass).salt) - md5(phpBB3)
what is md5(phpBB3), where these types of hashes are used?
3. Support for utilization of ATI Type GPU(s) for accelerated computation, specifically 4870x2 massively paralleled types.
Work in progress
4. GPU acceleration for hybrid type attack on hashes (not sure if this is possible).
What is that?

kiando
Posts: 64
Joined: Thu Oct 02, 2008 7:30 am
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by kiando » Wed Oct 08, 2008 1:53 pm

BarsMonster wrote:
1. Salted hashes including: md5(md5($salt).md5($pass)) - md5(md5($pass).md5($salt)) - md5(md5($pass).salt) - md5(phpBB3)
what is md5(phpBB3), where these types of hashes are used?
See overview: http://up.cih.ms/ettee/sql/

BarsMonster wrote:
4. GPU acceleration for hybrid type attack on hashes (not sure if this is possible).
What is that?
hybrid attack is the PasswordsPro (-> insidepro.com) version of JTR Rules/Dict attack.

reiluke
Posts: 3
Joined: Thu Oct 09, 2008 4:53 pm
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by reiluke » Thu Oct 09, 2008 4:58 pm

i say thank you for an amazing software, its really the fastest

request
1. crack simultaneous from a list
2. rainbow table generator / hybrid mode

ill even buy version 1.0

good luck and keep up the good work

User avatar
BarsMonster
Site Admin
Posts: 1118
Joined: Wed Oct 01, 2008 7:58 pm
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by BarsMonster » Thu Oct 09, 2008 5:44 pm

reiluke wrote:i say thank you for an amazing software, its really the fastest

request
1. crack simultaneous from a list
2. rainbow table generator / hybrid mode

ill even buy version 1.0

good luck and keep up the good work
#1 would be in supercomputer mode :-)
#2 is not going to be implemented (this year). See freerainbowtables.com, that did quite a good progress here.

c4p0ne
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by c4p0ne » Thu Oct 09, 2008 11:07 pm

Oh I almost forgot, can we pleaseee get a -max_len option to limit the attack? Unless thats already in there as some hidden feature(??)

reiluke
Posts: 3
Joined: Thu Oct 09, 2008 4:53 pm
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by reiluke » Fri Oct 10, 2008 2:34 am

BarsMonster wrote:
reiluke wrote:i say thank you for an amazing software, its really the fastest

request
1. crack simultaneous from a list
2. rainbow table generator / hybrid mode

ill even buy version 1.0

good luck and keep up the good work
#1 would be in supercomputer mode :-)
#2 is not going to be implemented (this year). See freerainbowtables.com, that did quite a good progress here.
#1 egb does crack from a list, will it really run slower if you compare gen hash = hash lists?
#2 but its going to be implement :joy: http://passcracking.com/hybrid.html please do hybrid mode

thanks mate! hope you implement salts in .09

User avatar
BarsMonster
Site Admin
Posts: 1118
Joined: Wed Oct 01, 2008 7:58 pm
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by BarsMonster » Fri Oct 10, 2008 5:20 am

reiluke wrote: #1 egb does crack from a list, will it really run slower if you compare gen hash = hash lists?
#2 but its going to be implement :joy: http://passcracking.com/hybrid.html please do hybrid mode

thanks mate! hope you implement salts in .09
#1 - didn't understood
#2 - well, rainbow table things have very limited usage cause they cannot support salts. Unsalted hashes would be cracked very efficiently on distributed supercomputer because of multihash feature.

Most likely there would be no 0.9 version, just 1.0 distributed one.

User avatar
the_drag0n
Posts: 217
Joined: Thu Oct 02, 2008 6:48 am
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by the_drag0n » Fri Oct 10, 2008 7:26 am

reiluke wrote: #1 egb does crack from a list, will it really run slower if you compare gen hash = hash lists?
yes it will. cracking a list of hashes is always slower than a single one simply as the newly generated one has to be compared with the number of hashes that are in your list.

DarkPrince
Posts: 148
Joined: Wed Oct 15, 2008 5:50 pm
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by DarkPrince » Sat Oct 25, 2008 1:52 pm

-max_up # (max amount of uppercase chars in pass)
-max_low # (max amount of lowercase chars in pass)
-max_spe # (max amount of special chars in pass)
-max_num # (max amount of numeric chars in pass)

-min_up # (minimum amount of uppercase chars in pass)
-min_low # (minimum amount of lowercase chars in pass)
-min_spe # (minimum amount of special chars in pass)
-min_num # (minimum amount of numeric chars in pass)


This would be great if you where cracking a database where you know ppl have to use atleast one of each.

Like "your password has to include uppecase, lowercase and numeric"


And on some pages you have to start or end with a special char

-first_is "0aA~" (first char is a numeric, lower, upper, special)
-last_is "0aA~" (last char is a numeric, lower, upper, special)
-first_not "0aA~" (first char is NOT a numeric, lower, upper, special)
-last_not "0aA~" (last char is NOT a numeric, lower, upper, special)

B0ff
Posts: 15
Joined: Tue Oct 14, 2008 3:39 pm
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by B0ff » Sat Oct 25, 2008 3:28 pm

The UDC http://the-udc.com/ is really slow compared to BarsWF but it is very flexible, for example the bruteforce search lets you either specify the charset for each character or the same custom charset for each. Also it has a hybrid search that allows you to insert a dictionary into one or more places and you can specify chars to fit in around it..
So a hybrid search could look like:

aa@aa
or
@b@
or ab@
and so on.

Where 'a' and 'b' are defined charsets, for example 'a' might be abcfghtrsyABCDEFG0123456789 and 'b' could just be &, and '@' is a dictionary/wordlist. These options give you the ability to run very targeted searches and would be extremely powerful combined with the speed of BarsWF.

User avatar
the_drag0n
Posts: 217
Joined: Thu Oct 02, 2008 6:48 am
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by the_drag0n » Sat Oct 25, 2008 4:46 pm

dont forget that those rules will slow the process down.
still i think that JTR will fit all the suggestions.

DarkPrince
Posts: 148
Joined: Wed Oct 15, 2008 5:50 pm
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by DarkPrince » Sat Oct 25, 2008 4:51 pm

the_drag0n wrote:dont forget that those rules will slow the process down.
still i think that JTR will fit all the suggestions.
Well how much would it slow it down? coz you would have alot of work that you know cant be right

Sc00bz
Posts: 136
Joined: Fri Oct 03, 2008 8:28 am
Contact:

Re: BarsWF feature wishlist

Post by Sc00bz » Mon Oct 27, 2008 8:59 am

You more than likely would not be able to reverse the last round of MD5 which will make it go from just doing 69% of an MD5 to doing 92% of an MD5. That's 33% slower. Also the generation of the password to check will take longer making it even slower.

User avatar
BarsMonster
Site Admin
Posts: 1118
Joined: Wed Oct 01, 2008 7:58 pm
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by BarsMonster » Mon Oct 27, 2008 9:52 am

Yeah, working with generated passwords on GPU is kinda slow cause it is very costy to transfer every generated password to GPU, as well as generate it on GPU.
Probably it might be limited to CPU-only attack, which should not be that terrible as number of variants here is much smaller.

DarkPrince
Posts: 148
Joined: Wed Oct 15, 2008 5:50 pm
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by DarkPrince » Mon Oct 27, 2008 10:16 am

BarsMonster wrote:Yeah, working with generated passwords on GPU is kinda slow cause it is very costy to transfer every generated password to GPU, as well as generate it on GPU.
Probably it might be limited to CPU-only attack, which should not be that terrible as number of variants here is much smaller.
Yeah cuz just by using the rule about the last being a "0aA~" you would make the list of possible variants ~50-85% less then it would be if you just let it try all variants (if I didn't calculate it all wrong)

User avatar
the_drag0n
Posts: 217
Joined: Thu Oct 02, 2008 6:48 am
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by the_drag0n » Mon Oct 27, 2008 2:09 pm

ahh just noticed sth:
it should be possible to add space to a charset manualy so you could do alpha space and dont have to select alpha symbol 14...
just a small update i guess so id be happy if you could add that in a quick&dirty update ;)

edit: and a .txt output file option would also be great!

User avatar
BarsMonster
Site Admin
Posts: 1118
Joined: Wed Oct 01, 2008 7:58 pm
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by BarsMonster » Mon Oct 27, 2008 2:49 pm

If I understood you correctly, it is possible now - -c a -C " "

User avatar
the_drag0n
Posts: 217
Joined: Thu Oct 02, 2008 6:48 am
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by the_drag0n » Mon Oct 27, 2008 2:50 pm

ahh *hits his head* well that was that ;)
still a txt output would be nice ;)

User avatar
BarsMonster
Site Admin
Posts: 1118
Joined: Wed Oct 01, 2008 7:58 pm
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Re: BarsWF feature wishlist

Post by BarsMonster » Mon Oct 27, 2008 3:23 pm

when bruteforce is done, password is saved to barswf.save in plaintext in second line, if that is what you needed :-)

Post Reply
[phpBB Debug] PHP Warning: in file [ROOT]/vendor/twig/twig/lib/Twig/Extension/Core.php on line 1266: count(): Parameter must be an array or an object that implements Countable

Who is online

Users browsing this forum: No registered users and 1 guest