Mysql323 tables

gurgalof · **Posted:** 02 Nov 2008, 21:44

And I am not really a coder...
I can code PHP, thats all.

the_drag0n · **Joined:** 12 May 2008, 11:02 **Posts:** 829

i just gave you a full script you just have to install the python runtime envoirement

you cant always get things in a .exe.

gurgalof · **Posted:** 02 Nov 2008, 21:54

Oh, sorry. Didn't know what Phyton is...

Installing now, thanks!

gurgalof · **Posted:** 02 Nov 2008, 22:05

Code: Select all

MSQLFAST modified by the Nephilim 2008
usage: msqlfast.exe <hash> <charset>
--------------------------------------
where <charset> is:
u for uppercase
l for lowercase
m for mixalpha
n for numeric
p for upper-numeric
x for mixalpha-numeric
a for all printable (ASCII 33 - 126)
MSQLFAST modified by the Nephilim 2008
usage: msqlfast.exe <hash> <charset>
--------------------------------------
where <charset> is:
u for uppercase
l for lowercase
m for mixalpha
n for numeric
p for upper-numeric
x for mixalpha-numeric
a for all printable (ASCII 33 - 126)
MSQLFAST modified by the Nephilim 2008
usage: msqlfast.exe <hash> <charset>
--------------------------------------
where <charset> is:
u for uppercase
l for lowercase
m for mixalpha
n for numeric
p for upper-numeric
x for mixalpha-numeric
a for all printable (ASCII 33 - 126)
MSQLFAST modified by the Nephilim 2008
usage: msqlfast.exe <hash> <charset>
--------------------------------------
where <charset> is:
u for uppercase
l for lowercase
m for mixalpha
n for numeric
p for upper-numeric
x for mixalpha-numeric
a for all printable (ASCII 33 - 126)
Traceback (most recent call last):
  File "C:\Documents and Settings\Gurgalof\Mina dokument\mysql323.py", line 11,
in <module>
    os.system('msqlfast.exe '+line+' '+charset)
KeyboardInterrupt

This is what i got...

Wrote this in my commanline

Code: Select all

mysql323.py list.txt x

I had to Ctrl+C it to stop...

the_drag0n · **Joined:** 12 May 2008, 11:02 **Posts:** 829

oh yes i forgot about sth :

Code: Select all

import sys, os

if not len(sys.argv) == 3:
    print 'Usage: mysql323.py [hash list] [charset]'
    sys.exit(1)

charset = sys.argv[2]
hashes = open(sys.argv[1],'r')

for line in hashes:
    line=line.strip()
    os.system('msqlfast.exe '+line+' '+charset)

_haxxor_ · **Posted:** 11 Dec 2008, 16:07

is it possible to use unicode symbols as a charset ? ( in mysql bruteforcer )
thx for any reply

_haxxor_ · **Posted:** 12 Jan 2009, 01:42

http://rapidshare.com/files/182052978/mysql323_numeric_1-10_0_2500x6553600_oxid_000.rt
http://rapidshare.com/files/182054370/mysql323_numeric_1-10_1_2500x6553600_oxid_000.rt
http://rapidshare.com/files/182055845/mysql323_numeric_1-10_2_2500x6553600_oxid_000.rt
http://rapidshare.com/files/182057719/mysql323_numeric_1-10_3_2500x6553600_oxid_000.rt
http://rapidshare.com/files/182058961/mysql323_numeric_1-10_4_2500x6553600_oxid_000.rt
http://rapidshare.com/files/182060414/mysql323_numeric_1-10_5_2500x6553600_oxid_000.rt
http://rapidshare.com/files/182061906/mysql323_numeric_1-10_6_2500x6553600_oxid_000.rt
my first mysql rainbow tables created...
thx the_drag0n for all the support, and the work done.

if anyone needs them for collision testing...or anything else, these are the links.

Sc00bz · **Joined:** 03 Dec 2007, 11:37 **Posts:** 737

Nice those tables are awesome since it takes my crap top like 1/2 second to brute force that key space.

_haxxor_ · **Posted:** 14 Jan 2009, 20:43

Sc00bz wrote:

Nice those tables are awesome since it takes my crap top like 1/2 second to brute force that key space.

glad you like them, and your so happy

i only posted because they are the first mysql tables created by frt.

quel · **Joined:** 15 Jul 2009, 22:38 **Posts:** 379

Sc00bz wrote:

Original code took 125.328 sec to crack "~~~~~~~"
Modified code took 39.992 sec to crack "~~~~~~~"

Code: Select all

...
         div  = (newstate1 & 0x3f) + sum + c;
         diff = ((newstate3 ^ newstate1) - (newstate1 << 8)) & MASK;
+         if ((div << 7) < diff) // "(div * MAX_CHAR) < diff" use 128 instead of 126 it's faster
            continue;
         if (diff % div != 0) continue;
         d = diff / div;
         if (d < MIN_CHAR || d > MAX_CHAR) continue;

         div  = (newstate3 & 0x3f) + sum + c + d;
         diff = ((targ1 ^ newstate3) - (newstate3 << 8)) & MASK;
+         if ((div << 7) < diff) // "(div * MAX_CHAR) < diff" use 128 instead of 126 it's faster
            continue;
         if (diff % div != 0) continue;
         e = diff / div;
         if (e < MIN_CHAR || e > MAX_CHAR) continue;
...

Proper timings:
!{N} to ~{N}
length 3 to 6: < 1 second
length 3 to 7: < 1 second to 28 seconds
length 3 to 8: 28 seconds to 44 minutes 31 seconds

_haxxor_ · **Posted:** 13 Nov 2009, 16:55

Nephilim, could you post the source ?

zero_cool · **Joined:** 19 Feb 2009, 02:29 **Posts:** 3

It would be could if it supports more than one hashes at the same time. Cracking 1000 times a single hash takes to long. It's only good if you need to crack a few hashes but if you got more than 10 or 20 it jsut needs to much time.

I know it's possible to use the script of the_drag0n but if you got a hash with a strong password it won't work anymore. The whole cracking will stop at one hash because it would need too much time to crack it. Also it would take to much time if you need to bruteforce 1000 times a single hash

Mysql323 tables

Who is online