KNOX D3

How to exploit robots.txt?

<div dir="ltr" style="text-align: left;" trbidi="on"><h3 style="text-align: left;">What is robots.txt?</h3> Robots.txt is a file that contain path which cannot crawled by bot most of time search-engine bots like google bot or etc. It tells search-engine that this directory is private & can not be crawled by them. If yo are site owner & want to make robots.txt file , then go following link , it will create robots.txt file for you. <a href="http://www.mcanerin.com/EN/search-engine/robots-txt.asp">http://www.mcanerin.com/EN/search-engine/robots-txt.asp</a> so just for now , robots.txt is pretty much what websites use to block certain pages from search engines. Here is a sample : <a href="http://www.whitehouse.gov/robots.txt">http://www.whitehouse.gov/robots.txt</a> <h3 style="text-align: left;">First method</h3> Now this method is very rare & the web-master would have to be stupid to do this, but you'll be surprised how many stupid people there are in the world. This one is simple, go to one of the disallowed directories & look in the source. Sometimes web-master leave comments there to give hints like passwords/ or user-names. You never know you might find something juicy. :] With this info you could possibly guess his password by entering some of the most infamous/best football teams. You can also check for disallowed directory which may be allowed or weak permission.<a href="http://pentesterscript.wordpress.com/2013/12/09/python-script-for-auditing-robots-txt/" target="_blank">Click here for python script to audit robots.txt file automatically.</a> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitGV_nawx2ToFfsFLjuv04tATeOG8Q6wOWOiwzP85Z5OtrdTqR0-gby5IUTDLK9YLGTxuuh4rA-pt5xTaucXm08a3nvuaUZloBBS8gkf3NvZj_fJhMS0f-8j0ikw7vFjASAL3yAdIwd7jc/s1600/robots.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Exploit-robots.txt" border="0" height="296" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitGV_nawx2ToFfsFLjuv04tATeOG8Q6wOWOiwzP85Z5OtrdTqR0-gby5IUTDLK9YLGTxuuh4rA-pt5xTaucXm08a3nvuaUZloBBS8gkf3NvZj_fJhMS0f-8j0ikw7vFjASAL3yAdIwd7jc/s320/robots.PNG" title="Exploit-robots.txt" width="320" /></a></div> <h3 style="text-align: left;">Second method</h3> Directory Traversal Ok, you use directory traversal when you get denied from a web-page. For example if you go to a disallowed directory & you get denied [404 page] You can easily bypass that if there insecure with directory traversal. Also, getting denied from a page shows that there must be some sexy info inside of it. :] So lets get started. 1. Go to the directory you got denied from. I will be using an example. www.slave.com/users/ 2. Once you get denied you need to add a not found directory. www.slave.com/users/randomwords&numbers 3. Now for the directory traversal part you need to add a /../ This will bring it back one directory, which can get you access to the disallowed directory. www.slave.com/users/randomwords&numbers/../ Keep it mind that you can also use the first method if you get access to the directory. <a href="http://tipstrickshack.blogspot.com/search/label/path%20traversal" target="_blank">Click here for more path traversal details tutorials. </a> <h3 style="text-align: left;">Third method</h3> CGI-BIN exploits Alright, the /cgi-bin/ page has alot of public exploits out right now. So, this method only goes for if the site has /cgi-bin/ So, anyways. I dont want my tutorial to be to big so here is a list of CGI-BIN exploits. <a href="https://www.hellboundhackers.org/articles/7-complete-set-of-cgi-bin-exploits-and-what-they-do.html">https://www.hellboundhackers.org/articles/7-complete-set-of-cgi-bin-exploits-and-what-they-do.html</a></div>

How to exploit robots.txt?

What is robots.txt? Robots.txt is a file that contain path which cannot crawled by bot most of time search-engine bots like google bot or et...

+ Read more »

How to POISONING ARP on network?

<div dir="ltr" style="text-align: left;" trbidi="on">How to do Address Resolution Protocol (ARP) poisoning? <h3>What Does ARP Mean?</h3> Address Resolution Protocol (ARP) is a stateless protocol, was designed to map Internet Protocol addresses (IP) to their associated Media Access Control (MAC) addresses. This being said, by mapping a 32 bit IP address to an associated 48 bit MAC address via attached Ethernet devices, a communication between local nodes can be made. On a majority of operating systems, such as Linux, FreeBSD, and other UNIX based operating systems, and even including Windows, the "arp" program is present. This program can be used to display and/or modify ARP cache entries. An example of the "arp" utility's output would look like the following: Windows: > arp -a Interface: 192.168.1.100 .- 0x10003 Internet Address Physical Address Type 192.168.1.1 00-13-10-23-9a-53 dynamic Linux: $ arp -na ? (192.168.1.1) at 00:90:B1C:F8:C0 [ether] on eth0 FreeBSD: $ arp -na ? (192.168.1.1) at 00:00:0c:3e:4d:49 on bge0 <h3>How ARP works?</h3> Specifically for Internet Protocol Version 4 (IPv4), ARP maps IP addresses between the Network layer and Data Link layer of the Open System Interconnection (OSI) model. For a more complete and thorough explanation of how address resolution works, and protocol specifics, please consult RFC 826. ARP Protocol Flaws :- ARP's main flaw is in its cache. Knowing that it is possible for ARP to update existing entries as well as add to the cache, this leads one to believe that forged replies can be made, which result in ARP cache poisoning attacks. <h3>Terms & Definitions :-</h3> ARP Cache Poisoning : Broadcasting forged ARP replies on a local network. In a sense, "fooling" nodes on the network. This can be done because ARP lacks authentication features, thus blindly accepting any request and reply that is received or sent. MAC Address Flooding : An ARP cache poisoning attack that is mainly used in switched environments. By flooding a switch with fake MAC addresses, a switch is overloaded. Because of this, it broadcasts all network traffic to every connected node. This outcome is referred to as "broadcast mode" because, all traffic passing through the switch is broadcasted out like a Hub would do. This then can result in sniffing all network traffic. <h3>The ARP Attacks :-</h3> 1] Connection Hijacking & Interception : Packet or connection hijacking and interception is the act in which any connected client can be victimized into getting their connection manipulated in a way that it is possible to take complete control over. 2] Connection Resetting : The name explains itself very well. When we are resetting a client's connection, we are cutting their connection to the system. This can be easily done using specially crafted code to do so. Luckily, we have wonderful software that was made to aid us in doing so. 3] Man In The Middle : One of the more prominent ways of attacking another user in order to hijack their traffic, is by means of a Man In The Middle (MITM) attack. Unlike the other attacks, a MITM is more a packet manipulation attack which in the end however does result in packet redirection to the attacker . all traffic will get sent to the attacker doing the MITM attack. This attack however is specific. As opposed to MAC Address Flooding or other attacks against a router/switch, the MITM attack is against a victim, and also can be done outside of a switched environment. Thus meaning, an attack can be executed against a person on the other side of the country. 4] Packet Sniffing : Sniffing on a Local Area Network (LAN) is quite easy if the network is segmented via a hub, rather than a switch. It is of course possible to sniff on a switched environment by performing a MAC flood attack. As a result of the MAC flood, the switch will act as a hub, and allow the entire network to be sniffed. This gives you a chance to use any sort of sniffing software available to you to use against the network, and gather packets. 5] Denial of Service : MAC Address Flooding can be considered a Denial of service attack. The main idea of the MAC flood, is to generate enough packet data to send toward a switch, attempting to make it panic. This will cause the switch to drop into broadcast mode and broadcast all packet data. This however did not result in a crash, or the service to be dropped, but to be overloaded. </div>

How to POISONING ARP on network?

How to do Address Resolution Protocol (ARP) poisoning? What Does ARP Mean? Address Resolution Protocol (ARP) is a stateless protocol, was de...

+ Read more »

How Google Pakistan Was Hacked?

<div dir="ltr" style="text-align: left;" trbidi="on"><div dir="ltr" style="text-align: left;" trbidi="on"><div><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpGIC2BYc9tokbz9VZyBiUp3utWrTM8ApRRHJFvXT0RSVnoH5IK1RpLmuGA7q5X2JMjp83-LJ-pHMfTSMov67qTNdgCegsi-3KNbptMUqlhNCka3BjWUk_nVf6R1ZSaR4c71F51zZ0CZw/s1600/Google-Pakistan+(1).png" imageanchor="1" style="clear: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="288" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpGIC2BYc9tokbz9VZyBiUp3utWrTM8ApRRHJFvXT0RSVnoH5IK1RpLmuGA7q5X2JMjp83-LJ-pHMfTSMov67qTNdgCegsi-3KNbptMUqlhNCka3BjWUk_nVf6R1ZSaR4c71F51zZ0CZw/s640/Google-Pakistan+(1).png" width="640" /></a></div><div> </div>Today morning, when i accessed google.com.pk, I was surprised to see the defacement page of turkish hackers, Later on i came to know that other websites such as Microsoft.com.pk were also defaced this morning. On checking the name servers with nslookup, the DNS servers were pointing towards another website, It was clear that the hacker compromised the DNS server and changed the DNS servers to their own, where they had their defacement page. The above image appeared on major .pk domains, when users were trying to access them. <div class="separator" style="clear: both; text-align: center;"></div><a name="more"></a>Some time later the page started pointing towards google.com instead of google.com.pk, However the name servers of all .pk domains are still pointing towards freehostia. <div>            <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzsdKgXiXAhBlNJTN2Tl6Qe2kf7kskVXWoZn2_c5ySn7kW6Yc7aqY7Iee25BMWBATkByyONilWn3ctM2BgHzyzkSqm6O4StSY_qT4uDYyKqiOEDoTiVHcfO04FmRBEvbkLJN2Fjan7Z9k/s1600/nameservers.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em; text-align: center;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzsdKgXiXAhBlNJTN2Tl6Qe2kf7kskVXWoZn2_c5ySn7kW6Yc7aqY7Iee25BMWBATkByyONilWn3ctM2BgHzyzkSqm6O4StSY_qT4uDYyKqiOEDoTiVHcfO04FmRBEvbkLJN2Fjan7Z9k/s1600/nameservers.png" /></a> How was Google Pakistan Hacked?</div><div> </div><div>So as i mentioned earlier that it looks to me that the registrar that was responsible for Google's DNS records may have been compromised and the records were changed, so when users went to google.com.pk they were redirected to different website which was setup by Turkish hacker to make it look that google.com.pk has been actually compromised. </div><div> </div><div> </div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgysHg3M7epJJeEf-51o9dCBY0qLUPETxHXxcz3weNIXxrmcoxdVyClSXkK-BZxQvoVADBctP6nPHdbYfsQtZ9xctG_FDF96aY_ZSoGwJle61m09Wn_EjV_6G69J2IMmbeo7tyVgBAHrKU/s1600/whois.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgysHg3M7epJJeEf-51o9dCBY0qLUPETxHXxcz3weNIXxrmcoxdVyClSXkK-BZxQvoVADBctP6nPHdbYfsQtZ9xctG_FDF96aY_ZSoGwJle61m09Wn_EjV_6G69J2IMmbeo7tyVgBAHrKU/s1600/whois.png" /></a></div><div class="separator" style="clear: both; text-align: center;"> </div><div>By a quick whois search i came to know that the registrar that is responsible to PKNIC domains is MarkMonitor, The is a huge chance that the turkish hackers may have gained access to MarkMonitor and then would have changed the DNS servers. Another possibility is that the hackers may have used an attack called "DNS Cache Poisoning" in order to change the DNS servers. I will update this page as soon as i have more updates regarding this attack. Update: Here is the Full List Of Compromised Domains: google.com.pk microsoft.pk biofreeze.com.pk blackstone.pk blogspot.pk itunes.pk gmails.pk zynga.com.pk chrome.com.pk chrome.pk visa.com.pk bx.com.pk abbvie.com.pk abbvie.pk cgma.pk chacos.com.pk cimacpa.pk cisco.pk ciscosystems.pk blogspot.com.pk cpacima.pk cpaintl.pk cpaldglobal.pk cpalwglobal.pk drivealliance.pk eastman.biz.pk eastman.net.pk eastman.org.pk ebay.pk monatin.pk everyblock.pk youtube.pk 3com.web.pk hp.web.pk revlon.pk streetwear.pk windows7.pk windows8.pk windowsrt.pk yahoo.pk yahoomaktoob.pk zynga.pk firstdirect.com.pk flickr.pk fordgofurther.pk gbuzz.pk gmailbuzz.pk gmail.pk googlebrowser.com.pk google.pk googlebuzz.pk googlechrome.com.pk abbviepharmaceuticals.pk abbviepharmaceuticals.com.pk hewlettpackard.pk hexagon.com.pk hsbcamanah.biz.pk hotmail.com.pk hpcloud.com.pk hp.com.pk hpscalene.com.pk hsbc.biz.pk hsbcadvance.com.pk hsbc.pk hsbcpremier.com.pk hsbcprivatebank.biz.pk hsbcamanah.com.pk hsbcdirect.com.pk hsbcnet.com.pk hsbcpremier.biz.pk hsbcpremier.pk hsbcprivatebank.com.pk investdirect.biz.pk investdirect.com.pk ipod.pk jaiku.pk kellyservices.com.pk maktoob.pk markmonitor.pk microsoftsmartglass.com.pk microsoftsmartglass.pk xboxsmartglass.com.pk xboxsmartglass.pk msn.org.pk windowsstore.pk windowsstore.com.pk opteron.com.pk parkplaza.pk paypal.pk postini.pk scalene.com.pk schwab.biz.pk schwab.com.pk sonystyle.com.pk streetwear.com.pk theworldslocalbank.com.pk genapp.pk genapp.com.pk generationapp.pk generationapp.com.pk windows.com.pk windows7.com.pk windows8.com.pk 3com.biz.pk 3com.fam.pk 3com.net.pk 3com.org.pk gchrome.com.pk aicpacima.pk </div></div>Update 2: Due to the Propogation of Google's name servers to Freehostia's nameservers, It made attackers to create any non-existing subdomain under compromised websites, For example rafaybaloch.google.com.pk. All the attacker would need to do is to register the non-existing subdomain under freehostia and add an index. Update 3: It seems that Google.com.pk has been finally restored and the nameservers are again pointing to dns.google.com.pk. <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeiVJnPADaxfJzDFm90epcgflDZRYhARIVzYszv_gBzMVKJt4CyRAhjE4Ip1spdIKPUb7skbF8_Digd3EPbZyVI0afSaNBmA27YcrnazD-lF09WuB5n2UCAEq03-bgUwB01SdD-KZfzi8/s1600/R.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em; text-align: center;"><img border="0" height="332" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeiVJnPADaxfJzDFm90epcgflDZRYhARIVzYszv_gBzMVKJt4CyRAhjE4Ip1spdIKPUb7skbF8_Digd3EPbZyVI0afSaNBmA27YcrnazD-lF09WuB5n2UCAEq03-bgUwB01SdD-KZfzi8/s640/R.png" width="577" /></a></div>

How Google Pakistan Was Hacked?

Today morning, when i accessed google.com.pk, I was surprised to see the defacement page of turkish hackers, Later on i came to know that ot...

+ Read more »

How to use latest java vulnerability to hack remote p.c. ?

How to use latest java vulnerability to hack remote p.c. ?

Today we are going to use metasploit again. We can hack remote computer using java applet to run code outside send-box. This vulnerability i...

+ Read more »

How to crack any hash with help of online services?

<div dir="ltr" style="text-align: left;" trbidi="on">How to crack any hash with help of online services? findmyhash.py try to crack different types of hashes using free online services. (1)Download it from <a href="http://code.google.com/p/findmyhash/downloads/list" target="_blank">here</a> . (2)Open terminal & change directory where you download tool , if we download tool in download folder then type in following command in terminal cd Downloads (3)python findmyhash.py Accepted algorithms are: MD4, MD5, SHA1, SHA256, RMD160, LM, NTLM, MYSQL, CISCO7 & JUNIPER NOTE: for LM / NTLM it is recommended to introduce both values with this format: python findmyhash.py LM -h 9a5760252b7455deaad3b435b51404ee:0d7f1f2bdeac6e574d6e18ca85fb58a7 python findmyhash.py NTLM -h 9a5760252b7455deaad3b435b51404ee:0d7f1f2bdeac6e574d6e18ca85fb58a7 Valid OPTIONS are: -h <hash_value> If you only want to crack one hash, specify its value with this option. -f <file> If you have several hashes, you can specify a file with one hash per line. NOTE: All of them have to be the same type. -g If your hash cannot be cracked, search it in Google and show all the results. NOTE: This option ONLY works with -h (one hash input) option. Examples: -> Try to crack only one hash. python findmyhash.py MD5 -h 098f6bcd4621d373cade4e832627b4f6 -> If the hash cannot be cracked, it will be searched in Google. python findmyhash.py SHA1 -h A94A8FE5CCB19BA61C4C0873D391E987982FBBD3 -g -> Try to crack multiple hashes using a file (one hash per line). python findmyhash.py MYSQL -f mysqlhashesfile.txt</div>

How to crack any hash with help of online services?

How to crack any hash with help of online services? findmyhash.py try to crack different types of hashes using free online services. (1)Down...

+ Read more »

Website Hacking With CSRF Attack

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPYSsqBbwStLJyLZD037LRO5v2bNHZhiFG_4xgTepJmVPZ4JXOB9wtQdasifIH1e8HLO42bEAjN2-XYcKiS_A3QvHeLt_6vD1rlxl95NjbbUMDWZ2nYr-j4bs8JoA7GD7WvNMtVXBy0wU/s1600/3832924543_a4e2db504f_o.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="356" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPYSsqBbwStLJyLZD037LRO5v2bNHZhiFG_4xgTepJmVPZ4JXOB9wtQdasifIH1e8HLO42bEAjN2-XYcKiS_A3QvHeLt_6vD1rlxl95NjbbUMDWZ2nYr-j4bs8JoA7GD7WvNMtVXBy0wU/s640/3832924543_a4e2db504f_o.png" width="577" /></a></div> Cross Site Request Forgery Attack is also known as CSRF or XSRF in short. Do not confuse it with Cross Site Scripting attack because it is totally different from that. Like SQL injection and XSS, CSRF is also one in top 10 OWASP web vulnerabilities for many years. <a name="more"></a> What is Cross Site Request Forgery Attack? Cross Site Request Forgery or CSRF is an attack method in which attacker exploit users' active session in the browser without the permission of innocent user. By using victim's browser session, attacker sends valid requests to a website that perform some action in users' account. User will not be able to know that the request has been sent from his browser. An Attacker uses some third party innocent websites to generate these valid requests from user’s browser. EX: If a form on a website can also be submitted from some other website, It is vulnerable to CSRF. Suppose there is a form on a vulnerable website (http://www.vulnerablesite.com/vulnerable.php) <form action=”action.php” method=”post”> </form> And I made a duplicate form on my local host <form action=” http://www.vulnerablesite.com/action.php” method=”post”> </form> I am able to submit the form by using the form on my localhost, the website is vulnerable to the CSRF attack This attack uses user's session to perform malicious task, so it is also known as "Session Riding attack."Sometimes it is hard to understand how this attack works in real life. So I am explaining it with the help of a example. Suppose if an online payment website like Paypal has CSRF vulnerability. Attacker A want to exploit CSRF vulnerability of this website and attack on victim B. For this he use some third party website. Innocent User B login into his account to do check the balance and then switch to a new tab without logging out from the older tab. Session is active on the browser. Attacker A had posted a link or image in a website that on load submits the payment transfer form to transfer money to the attacker's account by using active session. As the request came from user's browser by his session, CSRF vulnerable website will transfer the fund. How CSRF is different from XSS Many people have confusion inn between CSRF and XSS attack. In XSS, attacker exploit the trust of users on website. So we inject malicious script and user believes on it just because he see a valid website URL. Unlike XSS, in CSRF attacker exploits the website's trust on the browser. In this, a website thinks tha a request camre from the user's browser is made by user itself. Both vulnerabilities are dangerous enough. Protection against CSRF attack: Many people thinks that limiting against XSS also limits CSRF. But this is not true. We have to make so many things to limit the attack. There are many ways to protect the CSRF attack. Some important ways are given below: <ul style="text-align: left;"><li>Checking the HTTP Referrer header website. If it is a different domain, deny the request.</li><li>Limiting the lifetime of authentication cookies. If user is inactive for some fixed time, the session must be expired.</li><li>Limit the damage by authenticating each request made by user. </li><li>Use of random token for each session</li></ul>About Author: Deepanker Verma is a security researcher and tech blogger. You can read his security blog at <a href="http://www.hackingtricks.in/" target="_blank">HackingTricks</a>.</div>

Website Hacking With CSRF Attack

Cross Site Request Forgery Attack is also known as CSRF or XSRF in short. Do not confuse it with Cross Site Scripting attack because it is t...

+ Read more »

how to crack md5 hash in ubuntu?

<div dir="ltr" style="text-align: left;" trbidi="on"> If you have an password in md5 hash and you need password in plain text for this there is lot of tool and online websites too but they wont crack all md5 hash if your hash exist in thier database they will give u plain text password but if not than u have to use some tool like here. We are using a perl script to crack an hash so we had encrypted an text "r2/." into a md5 hash which is "5d28a1f53e24a8b0a85d0a53348d49ad" so here we will try to decrypt it again with perl in a plain text. So first of all here we already know the length of text is 4 and it is included with specail characters like ". /" etc so our job will be easy but if we dont know the length and what kind of character included in hash then what? no problem we have some solution for that too ok lets began with first step if u are using linux here we are using back track for this first of all you need perl script so donalod and follow the steps to crack a hash i will try to explain each part of this script (1)Download perl script from <a href="http://www.4shared.com/file/qzT7EjeS/md5crack.html" target="_blank">here</a>. (2)Make it exexcutable. (3)open terminal & change directory where you download script. (4)now type following command in terminal perl md5crack.pl you can see information about script. <div style="margin-bottom: 0in;"> </div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgP_dYgk1zUg1D8vScBUW_5GaibQ4SEQm1EU8EJvvgR0ykiN-YAr-le55CeaKMci0T2oH8xvEAz8YE41q3Vy_R5hrb38dk_cSJxxULkOjlCdJOEkySHEEPpUtsomWFKnemhXqSg-5uu-BWj/s1600/Screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="306" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgP_dYgk1zUg1D8vScBUW_5GaibQ4SEQm1EU8EJvvgR0ykiN-YAr-le55CeaKMci0T2oH8xvEAz8YE41q3Vy_R5hrb38dk_cSJxxULkOjlCdJOEkySHEEPpUtsomWFKnemhXqSg-5uu-BWj/s400/Screenshot.jpg" width="400" /></a></div><div style="margin-bottom: 0in;"> </div>(5)type following in terminal & hit enter. perl md5crack.pl ad 1 3 900150983cd24fb0d6963f7d28e17f72 our command will be like this > perl md5crack.pl ad 1 3 900150983cd24fb0d6963f7d28e17f72 ad is charset if we will use ad option that means it will try only lowercase alphabets and all digits 0-9 now 1 is minimum lenth of hash character like a b c etc and 3 is maximum lenth of hash so this command will try all lowercase alpha numerical from 1 to 3 lenth so if password is like abc or ab9 tc it will show us result now lets see next command line   <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg0sTeVGVJCRG7-A2X7k6lQRZ5BLbSjdE51C-rcsySXacaUJ9pYTsjPt3emzRAIeVH2GXStZcb4ER4Mznmd4S-u-PPxjE2Iz7yD1CyLOLJgLJGeWQnHCb7d2E9NVEb88BsIau0iTaLL85sM/s1600/Screenshot2.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="crack-md5-hash-in-ubuntu" border="0" height="312" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg0sTeVGVJCRG7-A2X7k6lQRZ5BLbSjdE51C-rcsySXacaUJ9pYTsjPt3emzRAIeVH2GXStZcb4ER4Mznmd4S-u-PPxjE2Iz7yD1CyLOLJgLJGeWQnHCb7d2E9NVEb88BsIau0iTaLL85sM/s400/Screenshot2.jpg" title="crack md5 hash in ubuntu" width="400" /></a></div><div style="margin-bottom: 0in;"> </div><div style="margin-bottom: 0in;"> </div>(6)type following in terminal & hit enter. perl md5crack.pl aA 3 3 900150983cd24fb0d6963f7d28e17f72 see here aA charset if we will use this option than it will try lower,uppercase alpha numerical word like "Jt3" and minimum length 3 and maximum is 3 it means it will try like this aaa,aab,aac ............aAc etc now lets move on last command line (7)Type following command in terminal. perl md5crack.pl aAdx 1 10 900150983cd24fb0d6963f7d28e17f72 here is charset is aAdx it will try lower,upperalpha numerical and specail charater ./*-+& etc. here minimum lenth is 1 and maximum is 10 to it will start from a to aaaaaaaaaa the first command will finish our tast fast but if hash included only lowercase alpha numerical word secound will try uppercase so it will took more than first command and thrid one will took more then first and second command so how to finish our job fast ok for cracking an hash i will say use more shell in one time like see normaly an pass length will be minimum 4 digits so we can start from 4 and maximum may be 10 or more so here what to do we can use 6 shell in one time for first command i will give u example here. (8)it`s our last example. perl md5crack.pl 4 4 900150983cd24fb0d6963f7d28e17f72 perl md5crack.pl ad 4 4 <hash here> this command will try only 4 charcter lenght word so in second shell we can try 5 5 so that will try only 5 charcter lengh word perl md5crack.pl ad 5 5 <hash here> like this we can use 6 6, 7 7, 8 8 , etc so minimum and maximum length will be same so task will be finish fast and it depend on charset what kind of charset you are trying like ad,aA or aAdx now as i told here i have an example to make understand>>> text= "r2/." and encrypted md5 hash is "5d28a1f53e24a8b0a85d0a53348d49ad" we will try to crack it again in plain text here we will try command line > perl md5crack.pl aAdx 4 4 5d28a1f53e24a8b0a85d0a53348d49ad  </div>

how to crack md5 hash in ubuntu?

If you have an password in md5 hash and you need password in plain text for this there is lot of tool and online websites too but they wont ...

+ Read more »