[phpBB Debug] PHP Warning: in file [ROOT]/phpbb/session.php on line 580: sizeof(): Parameter must be an array or an object that implements Countable
[phpBB Debug] PHP Warning: in file [ROOT]/phpbb/session.php on line 636: sizeof(): Parameter must be an array or an object that implements Countable
3.14.by forum • BarsWF feature suggestion
Page 1 of 1

BarsWF feature suggestion

Posted: Tue Feb 16, 2010 11:40 am
by proletsearch
Hi,
I am really impressed by the speed the software you have coded works with. May I suggest a new feature, that I guess will make it even better.
Can you implement a masked attack with custom positioning of custom charset. What I do mean by this is the following:

Let's say we know the format and charset used for a particular hash we try to recover.
It may have following form:
12AB1-34BB1-231BB
Where only some numbers and letters from the alphabet are used to compute it and the dashes have strict positions. It will save a lot of time if the positions of the well known chars are given via the command line.

Regards,
proletsearch

Re: BarsWF feature suggestion

Posted: Wed Feb 17, 2010 6:18 am
by BarsMonster
proletsearch wrote:Hi,
I am really impressed by the speed the software you have coded works with. May I suggest a new feature, that I guess will make it even better.
Can you implement a masked attack with custom positioning of custom charset. What I do mean by this is the following:

Let's say we know the format and charset used for a particular hash we try to recover.
It may have following form:
12AB1-34BB1-231BB
Where only some numbers and letters from the alphabet are used to compute it and the dashes have strict positions. It will save a lot of time if the positions of the well known chars are given via the command line.

Regards,
proletsearch
That was requested many times already, and this feature is not in the top-3 for implementation, unfortunately :sad:

Re: BarsWF feature suggestion

Posted: Wed Feb 17, 2010 10:53 am
by proletsearch
Well, it is enough if this feature is in the implementation queue. Top 3 or top 20, it does not matter Image

Re: BarsWF feature suggestion

Posted: Fri Feb 19, 2010 11:03 pm
by Bitweasil
I'd add that the Cryptohaze multiforcer 0.7 has this feature.

Re: BarsWF feature suggestion

Posted: Thu Apr 08, 2010 9:05 pm
by xtv
I would suggest a featue to include a pre-string or post-string in the "current_guess" string.
For example, if you're sure the password was ABC?????, where '?' means the unknown digits, BarsWF would form strings like "ABCaaaaa", "ABCaaaab", and so on.
I belive (If I'm not wrong) this would help you to recover 'salt'ed MD5 hashes, like linux's shadow passwords based on md5.

Also, BarsWF Isn't open source? I belive community could contribute to it's development and also appreciate to see how this baby works "under the hood"!

Re: BarsWF feature suggestion

Posted: Thu Apr 08, 2010 9:41 pm
by LordMike
This is already in the making. It's indeed called "Salted Hashes", and is very... Important :P

Also, it is NOT open-source, but free.

Re: BarsWF feature suggestion

Posted: Thu May 06, 2010 9:42 pm
by spYro
xtv wrote:I would suggest a featue to include a pre-string or post-string in the "current_guess" string.
For example, if you're sure the password was ABC?????, where '?' means the unknown digits, BarsWF would form strings like "ABCaaaaa", "ABCaaaab", and so on.
I belive (If I'm not wrong) this would help you to recover 'salt'ed MD5 hashes, like linux's shadow passwords based on md5.

Also, BarsWF Isn't open source? I belive community could contribute to it's development and also appreciate to see how this baby works "under the hood"!
I am searching for this, too.
I'm using your tool and it just works great :D
But, as said before, I'm searching for 2 parameters, that definde the start-word and the end-word.
Like you give him "ABC000" and "ABC999" and he tries ABC000, ABC001, and so on.
I also didnt find the way to define the exact charset manually (for example only use "ABC0123456789") via parameter, but I'm not sure if i just didnt find it or you didn't implemented it.
Both, the 2 strings and the charset, would be great for better usage and performance.

Can you tell me, how long it could take to implement both things? 2 Weeks? 2 Months? 1 Year?

Thanks in advance for your answer and.... sorry for any writing-mistake. I'm german ;)

Keep on the work!

Best wishes
spYro

Re: BarsWF feature suggestion

Posted: Fri May 14, 2010 9:50 am
by BarsMonster
spYro wrote:Can you tell me, how long it could take to implement both things? 2 Weeks? 2 Months? 1 Year?
Well, if you would look a little more careful both things are already implemented someway :crazy: