ÈÐ Wïgê† Ðð† ñåmê

ïñ£ð§ê¢, ïñ£ðrmå†ïðñ §ê¢µr, Ðïgï†ål £ðrêñ§ï¢§, hå¢kïñg, §¥§†êm åÐmïñ阮rå†ïðñ, lïñµx ßlðg

Backtrack: Multicore Processor Password Cracking With John The Ripper

, , , , , ,

Lets face it, John the Ripper has been around a long time and the reason its been around a long time is because its damn good at cracking passwords.  Yea, hashcat and oclhashcat are great for gpu cracking, but it doesn’t support as many algorithms as JTR.  So, imagine my surprise when I fire up John The Ripper on backtrack 5 64 bit and find out it is using a single CPU.  That is letting a potential 75% of my system sit there wanting to do something.  Luckily the fix is easier than fixing a sandwich.

If you already have jtr installed, you may want to see my john tips article.

First, lets grab the jumbo sourcecode….

[codesyntax lang=”bash” lines=”no” doclinks=”0″]

cd /pentest/passwords ; wget http://www.openwall.com/john/g/john-1.7.9-jumbo-5.tar.gz

[/codesyntax]

Then lets extract it….

[codesyntax lang=”bash” lines=”no” doclinks=”0″]

tar xzfvp john-1.7.9-jumbo-5.tar.gz

[/codesyntax]

Then switch to the src directory…..

[codesyntax lang=”bash” lines=”no” doclinks=”0″]

cd john-1.7.9-jumbo-5/src

[/codesyntax]

Next, open the Makefile in whatever text editor you use, I use vi…..and uncomment the two lines listed below under # gcc with OpenMP….

[codesyntax lang=”bash” lines=”no” doclinks=”0″]

# gcc with OpenMP
OMPFLAGS = -fopenmp
OMPFLAGS = -fopenmp -msse2

[/codesyntax]

If you are not building this for 64 bit linux with sse optimizations, then type make without any options to get the list of targets, otherwise, run the command below…

[codesyntax lang=”bash” lines=”no” doclinks=”0″]

make linux-x86-64

[/codesyntax]

When that completes, run the test from the ../run directory….

[codesyntax lang=”bash” lines=”no” doclinks=”0″]

cd ../run
./john --test

[/codesyntax]

It will spit out some test results…..run with however many cores you have on your system by default….(4xOMP) signifies 4 cores using OMP… (test results below)

So, now we have it using up all our cores, lets assume you only want it to use 2 cores out of a 4 core cpu…..use this string and replace the 2 with the number of cores to enable:

[codesyntax lang=”bash” lines=”no” doclinks=”0″]

OMP_NUM_THREADS=2 ./john --test

[/codesyntax]

[codesyntax lang=”bash” lines=”no” capitalize=”no” strict=”no” doclinks=”0″]

Benchmarking: Traditional DES [128/128 BS SSE2-16]... (4xOMP) DONE
Many salts:	8454K c/s real, 2173K c/s virtual
Only one salt:	7105K c/s real, 1840K c/s virtual

Benchmarking: BSDI DES (x725) [128/128 BS SSE2-16]... (4xOMP) DONE
Many salts:	290978 c/s real, 74590 c/s virtual
Only one salt:	273408 c/s real, 70104 c/s virtual

Benchmarking: FreeBSD MD5 [SSE2i 12x]... (4xOMP) DONE
Raw:	10455 c/s real, 2673 c/s virtual

Benchmarking: OpenBSD Blowfish (x32) [32/64 X2]... (4xOMP) DONE
Raw:	2685 c/s real, 690 c/s virtual

Benchmarking: Kerberos AFS DES [48/64 4K]... DONE
Short:	379904 c/s real, 351762 c/s virtual
Long:	1065K c/s real, 1065K c/s virtual

Benchmarking: LM DES [128/128 BS SSE2-16]... (4xOMP) DONE
Raw:	41123K c/s real, 10571K c/s virtual

Benchmarking: dynamic_0: md5($p)  (raw-md5)  [SSE2i 10x4x3]... DONE
Raw:	2712K c/s real, 2466K c/s virtual

Benchmarking: dynamic_1: md5($p.$s)  (joomla)  [SSE2i 10x4x3]... DONE
Many salts:	2552K c/s real, 2552K c/s virtual
Only one salt:	2364K c/s real, 2388K c/s virtual

Benchmarking: dynamic_2: md5(md5($p))  (e107)  [SSE2i 10x4x3]... DONE
Raw:	1341K c/s real, 1354K c/s virtual

Benchmarking: dynamic_3: md5(md5(md5($p)))  [SSE2i 10x4x3]... DONE
Raw:	891360 c/s real, 900363 c/s virtual

Benchmarking: dynamic_4: md5($s.$p)  (OSC)  [SSE2i 10x4x3]... DONE
Many salts:	2545K c/s real, 2571K c/s virtual
Only one salt:	2365K c/s real, 2365K c/s virtual

Benchmarking: dynamic_5: md5($s.$p.$s)  [SSE2i 10x4x3]... DONE
Many salts:	2441K c/s real, 2466K c/s virtual
Only one salt:	2253K c/s real, 2253K c/s virtual

Benchmarking: dynamic_6: md5(md5($p).$s)  [SSE2i 10x4x3]... DONE
Many salts:	2698K c/s real, 2726K c/s virtual
Only one salt:	1257K c/s real, 1257K c/s virtual

Benchmarking: dynamic_8: md5(md5($s).$p)  [SSE2i 10x4x3]... DONE
Many salts:	2566K c/s real, 2592K c/s virtual
Only one salt:	2380K c/s real, 2380K c/s virtual

Benchmarking: dynamic_9: md5($s.md5($p))  [SSE2i 10x4x3]... DONE
Many salts:	2523K c/s real, 2523K c/s virtual
Only one salt:	1213K c/s real, 1213K c/s virtual

Benchmarking: dynamic_10: md5($s.md5($s.$p))  [SSE2i 10x4x3]... DONE
Many salts:	1274K c/s real, 1274K c/s virtual
Only one salt:	1225K c/s real, 1225K c/s virtual

Benchmarking: dynamic_11: md5($s.md5($p.$s))  [SSE2i 10x4x3]... DONE
Many salts:	1281K c/s real, 1281K c/s virtual
Only one salt:	1231K c/s real, 1231K c/s virtual

Benchmarking: dynamic_12: md5(md5($s).md5($p))  (IPB)  [SSE2i 10x4x3]... DONE
Many salts:	3159K c/s real, 3159K c/s virtual
Only one salt:	1299K c/s real, 1299K c/s virtual

Benchmarking: dynamic_13: md5(md5($p).md5($s))  [SSE2i 10x4x3]... DONE
Many salts:	3119K c/s real, 3119K c/s virtual
Only one salt:	1298K c/s real, 1311K c/s virtual

Benchmarking: dynamic_14: md5($s.md5($p).$s)  [SSE2i 10x4x3]... DONE
Many salts:	2433K c/s real, 2433K c/s virtual
Only one salt:	1217K c/s real, 1229K c/s virtual

Benchmarking: dynamic_15: md5($u.md5($p).$s)  [64x2 (MD5_Body)]... DONE
Many salts:	6595K c/s real, 6595K c/s virtual
Only one salt:	3331K c/s real, 3331K c/s virtual

Benchmarking: dynamic_16: md5(md5(md5($p).$s).$s2)  [64x2 (MD5_Body)]... DONE
Many salts:	3876K c/s real, 3876K c/s virtual
Only one salt:	2207K c/s real, 2207K c/s virtual

Benchmarking: dynamic_17: phpass ($P$ or $H$)  [SSE2i 2x4x3]... DONE
Raw:	1378 c/s real, 1378 c/s virtual

Benchmarking: dynamic_18: md5($s.Y.$p.0xF7.$s) (Post.Office MD5)  [64x2 (MD5_Body)]... DONE
Many salts:	3234K c/s real, 3234K c/s virtual
Only one salt:	2901K c/s real, 2901K c/s virtual

Benchmarking: dynamic_19: Cisco PIX (MD5) [SSE2i 10x4x3]... DONE
Raw:	2469K c/s real, 2469K c/s virtual

Benchmarking: dynamic_20: Cisco PIX (MD5 salted) [SSE2i 10x4x3]... DONE
Many salts:	2549K c/s real, 2549K c/s virtual
Only one salt:	2356K c/s real, 2356K c/s virtual

Benchmarking: dynamic_21: HTTP Digest Access Auth [SSE2i 10x4x3]... DONE
Many salts:	1077K c/s real, 1077K c/s virtual
Only one salt:	1052K c/s real, 1052K c/s virtual

Benchmarking: dynamic_22: md5(sha1($p)) [SSE2i 10x4x3]... DONE
Raw:	1618K c/s real, 1618K c/s virtual

Benchmarking: dynamic_23: sha1(md5($p)) [SSE2i 10x4x3]... DONE
Raw:	1605K c/s real, 1605K c/s virtual

Benchmarking: dynamic_24: sha1($p.$s) [SSE2i 10x4x3]... DONE
Many salts:	4817K c/s real, 4817K c/s virtual
Only one salt:	4035K c/s real, 4035K c/s virtual

Benchmarking: dynamic_25: sha1($s.$p) [SSE2i 10x4x3]... DONE
Many salts:	4616K c/s real, 4616K c/s virtual
Only one salt:	4092K c/s real, 4092K c/s virtual

Benchmarking: dynamic_26: sha1($p) raw-sha1 [4x1]... DONE
Raw:	5605K c/s real, 5605K c/s virtual

Benchmarking: dynamic_27: FreeBSD MD5 [SSE2i 4x3]... DONE
Raw:	2724 c/s real, 2724 c/s virtual

Benchmarking: dynamic_28: Apache MD5 [SSE2i 4x3]... DONE
Raw:	2736 c/s real, 2736 c/s virtual

Benchmarking: dynamic_29: md5(unicode($p)) [SSE2i 10x4x3]... DONE
Raw:	2479K c/s real, 2504K c/s virtual

Benchmarking: dynamic_1001 md5(md5(md5(md5($p)))) [SSE2i 10x4x3]... DONE
Raw:	666480 c/s real, 673212 c/s virtual

Benchmarking: dynamic_1002 md5(md5(md5(md5(md5($p))))) [SSE2i 10x4x3]... DONE
Raw:	532440 c/s real, 532440 c/s virtual

Benchmarking: dynamic_1003 md5(md5($p).md5($p)) [64x2 (MD5_Body)]... DONE
Raw:	1968K c/s real, 1988K c/s virtual

Benchmarking: dynamic_1004 md5(md5(md5(md5(md5(md5($p)))))) [SSE2i 10x4x3]... DONE
Raw:	443160 c/s real, 443160 c/s virtual

Benchmarking: dynamic_1005 md5(md5(md5(md5(md5(md5(md5($p))))))) [SSE2i 10x4x3]... DONE
Raw:	379800 c/s real, 379800 c/s virtual

Benchmarking: dynamic_1006 md5(md5(md5(md5(md5(md5(md5(md5($p)))))))) [SSE2i 10x4x3]... DONE
Raw:	332400 c/s real, 332400 c/s virtual

Benchmarking: dynamic_1008 md5($p.$s) [RADIUS User-Password] [SSE2i 10x4x3]... DONE
Many salts:	2550K c/s real, 2575K c/s virtual
Only one salt:	2361K c/s real, 2361K c/s virtual

Benchmarking: dynamic_1009 md5($s.$p) [RADIUS Responses] [SSE2i 10x4x3]... DONE
Many salts:	2621K c/s real, 2647K c/s virtual
Only one salt:	2434K c/s real, 2410K c/s virtual

Benchmarking: Eggdrop [blowfish]... DONE
Raw:	24739 c/s real, 24988 c/s virtual

Benchmarking: CRC-32 [32/64]... (4xOMP) DONE
Many salts:	145850K c/s real, 39525K c/s virtual
Only one salt:	20807K c/s real, 6382K c/s virtual

Benchmarking: DIGEST-MD5 [DIGEST-MD5 authentication]... DONE
Many salts:	1308K c/s real, 1200K c/s virtual
Only one salt:	1308K c/s real, 1308K c/s virtual

Benchmarking: More Secure Internet Password [RSA MD defined by BSAFE 1.x - Lotus v6]... DONE
Many salts:	79975 c/s real, 80782 c/s virtual
Only one salt:	47417 c/s real, 47417 c/s virtual

Benchmarking: EPiServer SID Hashes [SHA-1]... DONE
Many salts:	4366K c/s real, 4410K c/s virtual
Only one salt:	4120K c/s real, 4120K c/s virtual

Benchmarking: HTTP Digest access authentication [HDAA-MD5]... DONE
Many salts:	1419K c/s real, 1433K c/s virtual
Only one salt:	1381K c/s real, 1381K c/s virtual

Benchmarking: HMAC MD5 [SSE2i 12x]... DONE
Raw:	706392 c/s real, 706392 c/s virtual

Benchmarking: IPB2 MD5 [Invision Power Board 2.x salted MD5]... DONE
Many salts:	2912K c/s real, 2912K c/s virtual
Only one salt:	1801K c/s real, 1801K c/s virtual

Benchmarking: Kerberos v4 TGT [krb4 DES]... DONE
Raw:	2451K c/s real, 2451K c/s virtual

Benchmarking: Kerberos v5 TGT [krb5 3DES (des3-cbc-sha1)]... DONE
Raw:	40663 c/s real, 40663 c/s virtual

Benchmarking: Lotus5 [Lotus v5 Proprietary]... (4xOMP) DONE
Raw:	949248 c/s real, 254490 c/s virtual

Benchmarking: Generic salted MD4 [32/64]... DONE
Many salts:	6823K c/s real, 6203K c/s virtual
Only one salt:	6022K c/s real, 6022K c/s virtual

Benchmarking: MediaWiki -- md5($s.'-'.md5($p)) [SSE2i 10x4x3]... DONE
Many salts:	2559K c/s real, 2585K c/s virtual
Only one salt:	1220K c/s real, 1220K c/s virtual

Benchmarking: M$ Cache Hash [Generic 1x]... (4xOMP) DONE
Many salts:	34383K c/s real, 9024K c/s virtual
Only one salt:	12105K c/s real, 3185K c/s virtual

Benchmarking: M$ Cache Hash 2 (DCC2) [SSE2i 4x]... (4xOMP) DONE
Raw:	807 c/s real, 225 c/s virtual

Benchmarking: MSCHAPv2 C/R MD4 DES [mschapv2]... (4xOMP) DONE
Many salts:	6938K c/s real, 1885K c/s virtual
Only one salt:	4379K c/s real, 1170K c/s virtual

Benchmarking: MS Kerberos 5 AS-REQ Pre-Auth [mskrb5]... (4xOMP) DONE
Many salts:	2100K c/s real, 560059 c/s virtual
Only one salt:	1205K c/s real, 319694 c/s virtual

Benchmarking: MS-SQL05 [SSE2i 4x]... DONE
Many salts:	6423K c/s real, 5893K c/s virtual
Only one salt:	5777K c/s real, 5777K c/s virtual

Benchmarking: MS-SQL [SSE2i 4x]... DONE
Many salts:	6424K c/s real, 6424K c/s virtual
Only one salt:	4752K c/s real, 4752K c/s virtual

Benchmarking: MYSQL_fast [mysql-fast]... DONE
Raw:	19611K c/s real, 19611K c/s virtual

Benchmarking: MYSQL [mysql]... DONE
Raw:	2730K c/s real, 2730K c/s virtual

Benchmarking: MySQL 4.1 double-SHA-1 [SSE2i 4x]... DONE
Raw:	2913K c/s real, 2943K c/s virtual

Benchmarking: LM C/R DES [netlm]... (4xOMP) DONE
Many salts:	8024K c/s real, 2100K c/s virtual
Only one salt:	884736 c/s real, 244402 c/s virtual

Benchmarking: LMv2 C/R MD4 HMAC-MD5 [netlmv2]... (4xOMP) DONE
Many salts:	2476K c/s real, 660275 c/s virtual
Only one salt:	1778K c/s real, 475585 c/s virtual

Benchmarking: NTLMv1 C/R MD4 DES [ESS MD5] [netntlm]... (4xOMP) DONE
Many salts:	7295K c/s real, 1954K c/s virtual
Only one salt:	3723K c/s real, 1031K c/s virtual

Benchmarking: NTLMv2 C/R MD4 HMAC-MD5 [netntlmv2]... (4xOMP) DONE
Many salts:	2457K c/s real, 640000 c/s virtual
Only one salt:	1687K c/s real, 450013 c/s virtual

Benchmarking: HalfLM C/R DES [nethalflm]... (4xOMP) DONE
Many salts:	7581K c/s real, 2005K c/s virtual
Only one salt:	1327K c/s real, 367618 c/s virtual

Benchmarking: Netscreen MD5 [NS MD5]... DONE
Raw:	4477K c/s real, 4107K c/s virtual

Benchmarking: Netscape LDAP SHA [SSE2i 4x]... DONE
Raw:	5979K c/s real, 5979K c/s virtual

Benchmarking: NT v2 [SSE2i 12x]... DONE
Raw:	4112K c/s real, 4112K c/s virtual

Benchmarking: NT MD4 [128/128 X2 SSE2-16]... DONE
Raw:	21758K c/s real, 21758K c/s virtual

Benchmarking: Oracle 11g [oracle11]... DONE
Many salts:	4237K c/s real, 4237K c/s virtual
Only one salt:	3689K c/s real, 3689K c/s virtual

Benchmarking: Oracle [oracle]... DONE
Raw:	707729 c/s real, 707729 c/s virtual

Benchmarking: PHPass MD5 [SSE2i 2x4x3]... DONE
Raw:	1392 c/s real, 1392 c/s virtual

Benchmarking: PHPS -- md5(md5($pass).$salt) [SSE2i 10x4x3]... DONE
Many salts:	2718K c/s real, 2718K c/s virtual
Only one salt:	1256K c/s real, 1256K c/s virtual

Benchmarking: PIX MD5 [SSE2i 10x4x3]... DONE
Many salts:	2487K c/s real, 2487K c/s virtual
Only one salt:	2490K c/s real, 2516K c/s virtual

Benchmarking: pkzip [N/A]... (4xOMP) DONE
Many salts:	24015K c/s real, 6286K c/s virtual
Only one salt:	11242K c/s real, 2982K c/s virtual

Benchmarking: Post.Office MD5 [STD]... DONE
Many salts:	3167K c/s real, 2932K c/s virtual
Only one salt:	3012K c/s real, 3012K c/s virtual

Benchmarking: Raw MD4 [SSE2i 12x]... DONE
Raw:	4103K c/s real, 4144K c/s virtual

Benchmarking: Raw MD5 [SSE2i 12x]... DONE
Raw:	2715K c/s real, 2743K c/s virtual

Benchmarking: Raw MD5 [SSE2i 10x4x3]... DONE
Raw:	2686K c/s real, 2686K c/s virtual

Benchmarking: md5(unicode($p)) [SSE2i 10x4x3]... DONE
Raw:	2485K c/s real, 2485K c/s virtual

Benchmarking: Raw SHA-1 [SSE2i 4x]... DONE
Raw:	5431K c/s real, 5431K c/s virtual

Benchmarking: Raw SHA [32/64]... DONE
Raw:	3634K c/s real, 3634K c/s virtual

Benchmarking: Salted SHA-1 [SSE2i 4x]... DONE
Many salts:	6057K c/s real, 6057K c/s virtual
Only one salt:	5394K c/s real, 5448K c/s virtual

Benchmarking: SAP BCODE [sapb]... (4xOMP) DONE
Many salts:	6232K c/s real, 1657K c/s virtual
Only one salt:	5225K c/s real, 1374K c/s virtual

Benchmarking: SAP CODVN G (PASSCODE) [sapg]... (4xOMP) DONE
Many salts:	4560K c/s real, 1206K c/s virtual
Only one salt:	2543K c/s real, 731897 c/s virtual

Benchmarking: Generic salted SHA-1 [32/64]... DONE
Many salts:	4122K c/s real, 3782K c/s virtual
Only one salt:	3813K c/s real, 3813K c/s virtual

Benchmarking: Mac OS X 10.4 - 10.6 salted SHA-1 [32/64]... (4xOMP) DONE
Many salts:	14298K c/s real, 3713K c/s virtual
Only one salt:	9988K c/s real, 2663K c/s virtual

Benchmarking: Raw SHA-224 [32/64]... DONE
Raw:	2098K c/s real, 1907K c/s virtual

Benchmarking: Raw SHA-256 [32/64]... DONE
Raw:	2092K c/s real, 2113K c/s virtual

Benchmarking: Raw SHA-384 [64/64]... DONE
Raw:	1661K c/s real, 1678K c/s virtual

Benchmarking: Raw SHA-512 [64/64]... DONE
Raw:	1644K c/s real, 1644K c/s virtual

Benchmarking: Mac OS X 10.7+ salted SHA-512 [64/64]... (4xOMP) DONE
Many salts:	3587K c/s real, 1038K c/s virtual
Only one salt:	547485 c/s real, 195392 c/s virtual

Benchmarking: hmailserver [32/64]... DONE
Many salts:	2155K c/s real, 1977K c/s virtual
Only one salt:	2046K c/s real, 2046K c/s virtual

Benchmarking: sybasease [32/64]... (4xOMP) DONE
Many salts:	854976 c/s real, 227993 c/s virtual
Only one salt:	788544 c/s real, 209719 c/s virtual

Benchmarking: generic crypt(3) DES [?/64]... (4xOMP) DONE
Many salts:	664416 c/s real, 177177 c/s virtual
Only one salt:	601536 c/s real, 162577 c/s virtual

Benchmarking: Tripcode DES [48/64 4K]... DONE
Raw:	280192 c/s real, 259437 c/s virtual

Benchmarking: ssh [32/64]... DONE
Raw:	182976 c/s real, 182976 c/s virtual

Benchmarking: pdf [32/64]... DONE
Many salts:	16939 c/s real, 16939 c/s virtual
Only one salt:	34731 c/s real, 34731 c/s virtual

Benchmarking: rar [32/64]... DONE
Raw:	33.6 c/s real, 33.6 c/s virtual

Benchmarking: zip [32/64]... (4xOMP) DONE
Raw:	1882 c/s real, 528 c/s virtual

Benchmarking: dummy [N/A]... DONE
Raw:	79548K c/s real, 72317K c/s virtual

[/codesyntax]


One response to “Backtrack: Multicore Processor Password Cracking With John The Ripper”

  1. […] You might also want to see my article Installing JTR On Backtrack for Multiprocessor Cores […]

Leave a Reply