Wophcrack – Ophcrack web interface

I’m assuming everyone reading already knows about Ophcrack – the awesome time/memory trade-off password cracker.
Well here is a nifty web-based interface for it. Rainbow Tables are really useful when cracking password hashes, but one major disadvantage of these tables is their size which can be hundreds of gigs for complex tables. The author thought it would be extremely useful to have a personal web interface for your rainbow tables which you can access from anywhere on the web anywhere without having to carry the large tables with you everywhere you go. And well here we are, Wophcrack (Web)Ophcrack.

Rainbow tables are really useful when cracking password hashes, One disadvantage of these tables is their size which can get up to tens and even hundreds of gigs.
I really liked the Offensive security Crackpot online hash cracker and  i thought it would  be really nice to have a web interface for my rainbow tables which i can access from web anywhere without having to carry them with me whenever i need them.

When cracking lm/ntlm hashes i really like using Ophcrack which provides a free GUI and CLI software along with  some free and paid tables.  

I wrote a quick and dirty PHP based web frontend for Ophcrack called Wophcrack, I must say i am not a programmer and i  am sure this could be done more efficiently and elegantly, anyway…its working fine , I thought maybe someone will find it useful so i decided to share it here.

Wophcrack was designed to work on Backtrack 4 R2, Although it can be install on any Linux distribution with some small adjustments, Wophcrack can also easily edited to support Rainbow crack.
Please read the requirements and installation notes before using Wophcrack.
Wophcrack will require some manual code adjustments to suite you environment.

Wophcrack Backtrack Installation

1. Download and Install ophcrack-cli
Backtrack doesn’t includes ophcrack-cli by default, you will need to download and install it manually
Get ophcrack-cli HERE

root@Blackbox:~/OphcrackWeb# dpkg -i ophcrack-cli_3.3.0-1_i386.deb

2. Configure cron
Give www-data user (apache) permissions to use cron

root@Blackbox:~# echo www-data > /etc/cron.allow

Auto start cron service on startup

root@Blackbox:~# update-rc.d cron defaults

Start the cron service

root@Blackbox:~# /etc/init.d/cron start

3. Create and import database
Create the database

root@Blackbox:~# mysql -u root -p

Enter password:

Welcome to the MySQL monitor.  Commands end with ; or \g.

Your MySQL connection id is 34

Server version: 5.0.67-0ubuntu6 (Ubuntu)

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql> CREATE DATABASE cracker;

Query OK, 1 row affected (0.04 sec)

Import Wophcrack sql data

root@Blackbox:/var/www# mysql -u root -p cracker < cracker.sql

Auto start mysql service on startup

root@Blackbox:~# update-rc.d mysql defaults

Start the mysql service

root@Blackbox:~# /etc/init.d/mysql start

4. Configure Mail notifications
make sure your dns is configured properly in /etc/resolv.conf
edit  ”/etc/hosts” and add at the top the following line with your ip address, hostname and domain name.
your-eth-ip   hostname.domain.com  hostname
Auto start sendmail service on startup

root@Blackbox:~# update-rc.d sendmail defaults

reStart the sendmail service

root@Blackbox:~# /etc/init.d/sendmail restart

You will also need to edit Wophcrack “rc.sh” file with you email address and domain line 8:

sendEmail -f cracker@domain.com -u 'Hash Result' -t $mail < /tmp/output.txt

5. Configure apache
Auto start apache service on startup

root@Blackbox:~# update-rc.d apache2 defaults

Start the apache service

root@Blackbox:~# /etc/init.d/apache start

6. Edit Wophcrack files
Wophcrack is designed to work from the “/var/www folder” in case you would like to move them into another dolder you will have to make some changes
Wophcrack will assume that your ophcrack rainbow tables home directory is located in “/pentest/RainbowTables” and each table files will be located in a sub folder with the following names:
tables_vista_free
tables_xp_free_fast
tables_xp_free_small
Vista_special
XP_special
In case you would like to place the tables in a different directory you will need to edit the following files:
index.php start from line 60:

tables_xp_free_small">XP Free Small
tables_xp_free_fast">XP Free Fast
XP_special">XP Special
tables_vista_free">Vista Free
Vista_special">Vista Special

You will also need to change path in the “rc.sh” file on line 3:

ophcrack-cli -g -d /pentest/passwords/RainbowTables/ -t /pentest/passwords/RainbowTables/$1 -f /tmp/temp.txt -o /tmp/output.txt

In case you plan to place Wophcrack in a directory which is not “/var/www” you will need to edit the following:
index.php line 41:

exec("echo \"* * * * * /var/www/rc.sh " . $info['hashset'] . "\" | crontab -");

rc.sh line 10:

php /var/www/check.php

check.php line 22:

exec("php /var/www/checkagain.php");

checkagain.php line 28:

exec("echo \"* * * * * /var/www/rc.sh " . $info['hashset'] . "\" | crontab -");

You can download Wophcrack Source Here:

http://www.megaupload.com/?d=HAFUFHHK

or from here:

Wophcrack

Title: Wophcrack Caption: Wophcrack File: wophcrack.zip Size: 17 kB

Installation:(For Backtrack user and Ubuntu Server)

1. Install mysql server

2. set user,password root or user for mysql server

3. create cracker database in mysql server
4. import cracker.sql into your mysql server

5. edit wophcrack/config.php with your environment.

6. edit my apache2 configuration(sites-available/default) file with (/pentest/password/wophcrack is my wophcrack path.)

        Alias /wophcrack "/pentest/password/wophcrack/"
       
                Options FollowSymLinks
                AllowOverride None
                Order allow,deny
                allow from all
       

7. I try to use rc.sh but it's not work 'cause ^M and ophcrack-cli in the script. And I try to fix it by myself like this.

#!/bin/bash
crontab -r
#the original line
#ophcrack-cli -g -d /pentest/passwords/RainbowTables/ -t /pentest/passwords/RainbowTables/$1 -f /tmp/temp.txt -o /tmp/output.txt
#my edit and rcrack/rainbow is my rainbow tables path.
ophcrack -g -d /pentest/passwords/rcrack/rainbow -t /pentest/passwords/rcrack/rainbow/$1 -f /tmp/temp.txt -o /tmp/output.txt

if [ $? -ne 0 ] ; then
        echo "Not Finished!";
else
        for mail in $(cat /tmp/mail.txt);do
                sendEmail -f materaj@gmail.com -u 'Hash Result' -t $mail < /tmp/output.txt
        done
        php /var/www/check.php
fi
########################################################

Source: http://exploit.co.il/hacking/wophcrack-ophcrack-web-interface/

Access Site Which are blocked at college,school or Company.

The Tor software protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, it prevents the sites you visit from learning your physical location, and it lets you access sites which are blocked.
The Tor Browser Bundle lets you use Tor on Windows, Mac OS X, or Linux without needing to install any software. It can run off a USB flash drive, comes with a pre-configured web browser, and is self-contained. The Tor IM Browser Bundle additionally allows instant messaging and chat over Tor. If you would prefer to use your existing web browser, install Tor permanently, or if you don't use Windows, see the other ways to download Tor.
Freedom House has produced a video on how to find and use the Tor Browser Bundle. If you don't see a video below, view it at Youtube . Know of a better video or one translated into your language? Let us know!

Download Tor Browser Bundle and Tor IM Browser Bundle

To start using the Tor Browser Bundle or Tor IM Browser Bundle, download the file for your preferred language. This file can be saved wherever is convenient, e.g. the Desktop or a USB flash drive.
If you have an unreliable Internet connection, it may be easier for you to download the bundle edition which is split up into smaller parts.

Linux instructions

Download the architecture-appropriate file above, save it somewhere, then run:
tar -xvzf tor-browser-gnu-linux-i686-1.1.8-dev-LANG.tar.gz or tor-browser-gnu-linux-x86_64-1.1.8-dev-LANG.tar.gz (where LANG is the language listed in the filename), and either double click on the directory or cd into it, then execute the start-tor-browser script. This will launch Vidalia and once that connects to Tor, it will launch Firefox. Do not unpack or run TBB as root.

Windows instructions

Extraction

Download the file above, and save it somewhere, then double click on it. Click on the button labelled "..." (1) and select where you want to save the bundle then click OK (2). At least 50 MB free space must be available in the location you select. If you want to leave the bundle on the computer, saving it to the Desktop is a good choice. If you want to move it to a different computer or limit the traces you leave behind, save it to a USB disk.
Click Extract (3) to begin extraction. This may take a few minutes to complete.

Usage

Once extraction is complete, open the folder Tor Browser from the location you saved the bundle.
Double click on the Start Tor Browser (4) application (it may be called Start Tor Browser.exe on some systems.)
The Vidalia window will shortly appear.

Once Tor is ready, Firefox will automatically be opened. Only web pages visited through the included Firefox browser will be sent via Tor. Other web browsers such as Internet Explorer are not affected. Make sure that it says "Tor Enabled" (5) in the bottom right corner before using it. To reduce the risk of confusion, don't run Firefox while using the Tor Browser Bundle, and close existing Firefox windows before starting.
If you installed the Tor IM Browser Bundle, the Pidgin instant messaging client will also be automatically opened.
Once you are finished browsing, close any open Firefox windows by clicking on the (6). For privacy reasons, the list of webpages you visited and any cookies will be deleted.

With the Tor Browser Bundle, Vidalia and Tor will automatically close. With the Tor IM Browser Bundle you need to also close Pidgin by right-clicking on the Pidgin icon (7), and choosing Quit (8).

To use the Tor Browser Bundle or Tor IM Browser Bundle again, repeat the steps in "Usage".
Remember that Tor anonymizes the origin of your traffic, and it encrypts everything inside the Tor network, but it can't encrypt your traffic between the Tor network and its final destination. If you are communicating sensitive information, you should use as much care as you would on the normal scary Internet — use HTTPS or other end-to-end encryption and authentication.

After a Long Gap....

Guys its been a long time since i blogged on this site sorry for the very long gap...
would be posting many intresting posts from now on...
:) :)