Remote Exploit Forums

Go Back   Remote Exploit Forums > Specialist Topics > Pentesting


Pentesting Specific topics related to legal penetration testing

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 01-24-2008, 11:38 AM
drpepperONE's Avatar
Member
 
Join Date: Nov 2007
Location: Italy
Posts: 51
Default .::Combina password generator::.

Hi to all.

I want suggest you an usefull tool to generate password dictionary using Combination & Permutation functions.

Quote:
"combina" is a password generator that uses four different algorithms based on combinatorial analysis.
It implements permutation without repetition, permutation with repetition (the famous brute force),
combination without repetition, and combination with repetition.
It supports an unlimited number of characters in the input and MD5 and SHA1 password hashes
WebSite developper :

http://www.digitazero.org/?p=30

Source Code:

http://freshmeat.net/redir/combina/6...4.1_src.tar.gz


Command help:

Quote:
combina --help
combina: A password generator that implements the combinatorial analysis.
Usage: combina [-cmdraAns] [-k <int>] [-p <int>] [--user=STRING]... [--add-before=STRING]... [--add-after=STRING]... [--md5] [--sha1] [--help] [--version]
-c Combination without repetition
-m Combination with repetition
-d Permutation without repetition
-r Permutation with repetition (default)
-k <int> define the length of the passwords (default is 3)
-p <int> progressive length of the passwords (from p to k)
-a add charset [abcdefghijklmnopqrstuvwxyz]
-A add charset [ABCDEFGHIJKLMNOPQRSTUVWXYZ]
-n add charset [0123456789]
-s add charset [! "#$%&'()*+,-./:;<=>?@[\]^_`{|}~]
--user=STRING add your charset
--add-before=STRING add your const string before charset
--add-after=STRING add your const string after charset
--md5 return the MD5 hash
--sha1 return the SHA1 hash
--help print this help and exit
--version print version information and exit

Report bugs to <info@digitazero.org>.

How to install in BT3 beta:

Requirement:

Quote:
argtable2 openssl
Install argtable2

Quote:
slapt-get --install argtable-2.7-i686-1doc

Reading Package Lists... Done
The following NEW packages will be installed:
argtable
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 2.9MB of archives.
After unpacking 4.7MB of additional disk space will be used.
Get http://linuxpackages.inode.at/Slackware-12.0/ argtable 2.7-i686-1doc [2.9MB]...Done

Preparing to install argtable-2.7-i686-1doc
Installing package argtable-2.7-i686-1doc...
PACKAGE DESCRIPTION:
argtable: argtable 2.7 (An ANSI C library for parsing cmd)
argtable:
argtable: Argtable is an ANSI C library for parsing GNU style
argtable: command line options with a minimum of fuss.
argtable:
argtable: Required: -
argtable: License: GPL-2
argtable: Homepage: http://argtable.sourceforge.net/
argtable:
argtable: Build by: doc@cyber-tec.org
Executing install script for argtable-2.7-i686-1doc...

Done

Install openssl lib:

Quote:
wget http://ftp.belnet.be/packages/slackw....8g-i486-1.tgz

--11:51:41-- http://ftp.belnet.be/packages/slackw....8g-i486-1.tgz
=> `openssl-0.9.8g-i486-1.tgz.5'

100%[================================================== =========>] 3,457,202 36.52K/s ETA 00:00

11:52:40 (57.57 KB/s) - `openssl-0.9.8g-i486-1.tgz.5' saved [3457202/3457202]



wget http://ftp.belnet.be/packages/slackw....8g-i486-1.tgz

100%[================================================== =========>] 845,145 65.07K/s ETA 00:00

11:52:57 (68.49 KB/s) - `openssl-solibs-0.9.8g-i486-1.tgz' saved [845145/845145]


installpkg openssl-0.9.8g-i486-1.tgz openssl-solibs-0.9.8g-i486-1.tgz
Installing package openssl-0.9.8g-i486-1...

PACKAGE DESCRIPTION:
openssl: openssl (Secure Sockets Layer toolkit)
openssl:
openssl: The OpenSSL certificate management tool and the shared libraries that
openssl: provide various encryption and decryption algorithms and protocols.
openssl:
openssl: This product includes software developed by the OpenSSL Project for
openssl: use in the OpenSSL Toolkit (http://www.openssl.org). This product
openssl: includes cryptographic software written by Eric Young
openssl: (eay@cryptsoft.com). This product includes software written by Tim
openssl: Hudson (tjh@cryptsoft.com).
openssl:
Executing install script for openssl-0.9.8g-i486-1...

Installing package openssl-solibs-0.9.8g-i486-1...
PACKAGE DESCRIPTION:
openssl-solibs: openssl-solibs (OpenSSL shared libraries)
openssl-solibs:
openssl-solibs: These shared libraries provide encryption routines required by
openssl-solibs: programs such as openssh. They are also used by KDE's Konqueror web
openssl-solibs: browser to provide secure web connections.
openssl-solibs:
openssl-solibs: This product includes software developed by the OpenSSL Project for
openssl-solibs: use in the OpenSSL Toolkit (http://www.openssl.org). This product
openssl-solibs: includes cryptographic software written by Eric Young
openssl-solibs: (eay@cryptsoft.com). This product includes software written by Tim
openssl-solibs: Hudson (tjh@cryptsoft.com).
Executing install script for openssl-solibs-0.9.8g-i486-1...

Install combina:

Quote:
wget http://freshmeat.net/redir/combina/6...4.1_src.tar.gz

--11:56:51-- http://freshmeat.net/redir/combina/6...4.1_src.tar.gz
100%[================================================== =========>] 6,747 --.--K/s

11:56:54 (312.45 KB/s) - `combina-0.4.1_src.tar.gz' saved [6747/6747]

tar xvfz combina-0.4.1_src.tar.gz

combina/include/combina.h
combina/src/combina.c
combina/combina.1.gz
combina/Makefile
combina/ChangeLog

bt combina # ls -la
total 44
drwxr-xr-x 4 root root 4096 Jan 24 11:57 ./
drwxr-xr-x 36 root root 20480 Jan 24 11:57 ../
-rw-r--r-- 1 1000 users 1287 Jan 9 2007 ChangeLog
-rw-r--r-- 1 1000 users 658 Jan 9 2007 Makefile
-rw-r--r-- 1 1000 users 1291 Jan 9 2007 combina.1.gz
drwxr-xr-x 2 root root 4096 Jan 24 11:57 include/
drwxr-xr-x 2 root root 4096 Jan 24 11:57 src/

bt combina # make
gcc -c src/combina.c -o src/combina.o -O2 -Wall -ansi -static -I"include"
gcc src/combina.o -o combina -largtable2 -lcrypto

bt combina # make install
mkdir -p //usr/local/bin && cp combina //usr/local/bin
mkdir -p //usr/local/man/man1 && cp combina.1.gz //usr/local/man/man1/combina.1.gz
Example:

For a dictionary of password lenght 24 for all ascii TABLE char:

Quote:

combina -cdaAns -k 24

abcdefghijklmnopqrstuwA9
abcdefghijklmnopqrstuwA!
abcdefghijklmnopqrstuwA
abcdefghijklmnopqrstuwA"
abcdefghijklmnopqrstuwA#
abcdefghijklmnopqrstuwA$
abcdefghijklmnopqrstuwA%
abcdefghijklmnopqrstuwA&
abcdefghijklmnopqrstuwA'
abcdefghijklmnopqrstuwA(
abcdefghijklmnopqrstuwA)
abcdefghijklmnopqrstuwA*
abcdefghijklmnopqrstuwA+
abcdefghijklmnopqrstuwA,
abcdefghijklmnopqrstuwA-
abcdefghijklmnopqrstuwA.
abcdefghijklmnopqrstuwA/
abcdefghijklmnopqrstuwA:
abcdefghijklmnopqrstuwA;
abcdefghijklmnopqrstuwA<
abcdefghijklmnopqrstuwA=
abcdefghijklmnopqrstuwA>
abcdefghijklmnopqrstuwA?
abcdefghijklmnopqrstuwA@
abcdefghijklmnopqrstuwA[
abcdefghijklmnopqrstuwA\
abcdefghijklmnopqrstuwA]
abcdefghijklmnopqrstuwA^
abcdefghijklmnopqrstuwA_
abcdefghijklmnopqrstuwA`
abcdefghijklmnopqrstuwA{
abcdefghijklmnopqrstuwA|
abcdefghijklmnopqrstuwA}
abcdefghijklmnopqrstuwA~
abcdefghijklmnopqrstuwBC
abcdefghijklmnopqrstuwBD
abcdefghijklmnopqrstuwBE
abcdefghijklmnopqrstuwBF
__________________
Use your Brain, don't be slave!!!!

Last edited by drpepperONE; 01-24-2008 at 02:42 PM.
Reply With Quote
  #2 (permalink)  
Old 01-26-2008, 09:27 AM
Junior Member
 
Join Date: Jan 2008
Posts: 10
Default

drpepperONE

Nice post, and I like the tool.... Good way for me to make some really big files.
Reply With Quote
  #3 (permalink)  
Old 01-26-2008, 07:24 PM
Junior Member
 
Join Date: Jun 2006
Posts: 28
Default

thanks for sharing
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 04:36 AM.


Powered by vBulletin® Version 3.8.2
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.3.0