Cracking MD5 Dengan findmyhash

findmyhash adalah tool yang berguna untuk men-decrypt hash yang kita miliki. Tool ini akan memasukkan hash kita ke berbagai website encrypter.(kira-kira begitu) Kalau di BackTrack tempatnya ada di /pentest/passwords/findmyhash

Developer

Yang bikin findmyhash adalah:

[Web]           http://laxmarcaellugar.blogspot.com/
[Mail/Google+]  bloglaxmarcaellugar@gmail.com
[twitter]       @laXmarcaellugar

Daftar Hash

Hash yang bisa di-decrypt dengan findmyhash:

• MD4 - RFC 1320
• MD5 - RFC 1321
• SHA1 - RFC 3174 (FIPS 180-3)
• SHA224 - RFC 3874 (FIPS 180-3)
• SHA256 - FIPS 180-3
• SHA384 - FIPS 180-3
• SHA512 - FIPS 180-3
• RMD160 - RFC 2857
• GOST - RFC 5831
• WHIRLPOOL - ISO/IEC 10118-3:2004
• LM - Microsoft Windows hash
• NTLM - Microsoft Windows hash
• MYSQL - MySQL 3, 4, 5 hash
• CISCO7 - Cisco IOS type 7 encrypted passwords
• JUNIPER - Juniper Networks $9$ encrypted passwords
• LDAP_MD5 - MD5 Base64 encoded
• LDAP_SHA1 - SHA1 Base64 encoded

Contoh Penggunaan

Contoh penggunaan findmyhash untuk cracking md5

root@batik:/pentest/passwords/findmyhash# ./findmyhash.py MD5 -h 21232f297a57a5a743894a0e4a801fc3 

Cracking hash: 21232f297a57a5a743894a0e4a801fc3 
 
Analyzing with cmd5 (http://www.cmd5.org)...
... hash not found in cmd5

Analyzing with bigtrapeze (http://www.bigtrapeze.com)...
... hash not found in bigtrapeze

Analyzing with hashchecker (http://www.hashchecker.com)...
... hash not found in hashchecker

Analyzing with md5hashcracker (http://md5hashcracker.appspot.com)...

***** HASH CRACKED!! *****
The original string is: admin


The following hashes were cracked:
----------------------------------

21232f297a57a5a743894a0e4a801fc3 -> admin

Pranala Menarik

• Backtrack
• Linux Howto