Skip to content

Latest commit

 

History

History
61 lines (45 loc) · 2.31 KB

File metadata and controls

61 lines (45 loc) · 2.31 KB

Herramienta para descifrar hashes SHA modificados mediante ataque de diccionario.

Herramienta para descifrar contraseñas, que intenta encontrar la contraseña original a partir de un hash y una salt dados. Utiliza una lista de palabras para probar cada contraseña y aplicar el hash utilizando el algoritmo de hash especificado (SHA1 en este caso). Si el hash de una contraseña intentada coincide con el hash dado, la contraseña se considera encontrada y se muestra.


Es posible descifrar estos hashes, utilizando openssl y john o hashcat.

It is possible to crack theese hashes by using openssl and john or hashcat.

  • Creación del hash sha1 modificado / modified sha1 hash creation
printf "%s%s" d monkeybizness | openssl dgst -sha1 -binary | base64 -w 0 | tr '+/' '-/' | tr '/' '_'

Tool for cracking modified SHA hashes by dictionary attack.

Password cracking tool that attempts to find the original password from a given hash and salt. It uses a wordlist to try each password and hash it using the specified hash algorithm (SHA1 in this case). If the hash of a tried password matches the given hash, the password is considered found and displayed.


Require:

  • TQDM Librarie.
pip install tqdm

python


Usage:

  • straight:
python3 /full/file/path/to/sha2text.py <salt> <hash> <wordlist>
  • By alias:
# into ~/.zshrc create a new alias.
alias sha2text='python3 /full/file/path/to/sha2text.py'
sha2text <salt> <hash> <wordlist>

Example:

python3 sha2text.py 'd' '$SHA1$d$uP0_QaVBpDWFeo8-dRzDqRwXQ2I=' '/usr/share/wordlists/rockyou.txt'

Output:

└─$ sha2text 'd' '$SHA1$d$uP0_QaVBpDWFeo8-dRzDqRwXQ2I=' '/usr/share/wordlists/rockyou.txt'
Processing:  10%|██████████████████████▎                                                                                                                                                                     | 1478437/14344392 [00:04<00:34, 369078.27it/s]

 [+] Pwnd !!! $SHA1$d$uP0_QaVBpDWFeo8-dRzDqRwXQ2I=::::monkeybizness