ÈÐ Wïgê† Ðð† ñåmê http://www.edwiget.name ïñ£ð§ê¢, ïñ£ðrmå†ïðñ §ê¢µr, Ðïgï†ål £ðrêñ§ï¢§, hå¢kïñg, §¥§†êm åÐmïñ阮rå†ïðñ, lïñµx ßlðg Mon, 20 Feb 2012 06:34:57 +0000 en hourly 1 http://wordpress.org/?v= Backtrack: fixing fix-splash cpio initrd grew error http://www.edwiget.name/2012/02/backtrack-fixing-fix-splash-cpio-initrd-grew-error/?utm_source=rss&utm_medium=rss&utm_campaign=backtrack-fixing-fix-splash-cpio-initrd-grew-error http://www.edwiget.name/2012/02/backtrack-fixing-fix-splash-cpio-initrd-grew-error/#comments Mon, 20 Feb 2012 06:25:45 +0000 edwigetadmin http://www.edwiget.name/?p=472 [...]]]> If you run fix-splash on a backtrack installation and get:

$ sudo fix-splash
[*] Fixing Initrd
[*] Extracting Initrd
181100 blocks
cpio: File ./initrd grew, 46361600 new bytes not copied
181100 blocks
[*] Reboot and bask in the joys of BootSplash

The fix is really simple…..

sudo vi `which fix-splash`

and scroll to line 16 which has:

find ./ | cpio -H newc -o > initrd

and change that line to:

find ./ ! -name initrd | cpio -H newc -o > initrd

Save the file and run it again….poof….fixed.

The reason for the error was simple, we were creating a file in the directory we told the script to search….so it started at 0 bytes and increased in size during the search (find command)

]]> http://www.edwiget.name/2012/02/backtrack-fixing-fix-splash-cpio-initrd-grew-error/feed/ 0 Backtrack: John The Ripper Tips & Examples http://www.edwiget.name/2012/02/backtrack-john-the-ripper-tips-examples/?utm_source=rss&utm_medium=rss&utm_campaign=backtrack-john-the-ripper-tips-examples http://www.edwiget.name/2012/02/backtrack-john-the-ripper-tips-examples/#comments Sat, 11 Feb 2012 08:56:18 +0000 edwigetadmin http://www.edwiget.name/?p=457 [...]]]> You might also want to see my article Installing JTR On Backtrack for Multiprocessor Cores

I am too lazy to restore the old version of this file from my old website (it was hosted for years on mambo and I am just too lazy to do the db conversion).  Anyways, this website serves a couple of purposes, first is to keep some of my own notes handy and second to help others.  With that in mind, here is a collection of tips on using john the ripper:

Prepare Linux Shadow Passwords

umask 077
./unshadow /etc/passwd /etc/shadow > mypasswds

Default Modes - This will try “single crack” mode first, then use a wordlist with rules, and finally go for “incremental” mode.

./john mypasswds

Show Passwords

john --show mypasswds

Specify Modes

john --single mypasswds

Multiple Files Containing Hashes

john --single passwd1 passwd2 mypasswds
or use a wildcard 
john --single passwd* mypasswds

To use a wordlist

john --wordlist=/path/to/password.lst mypasswds

To mangle words from the wordlist, use the –rules option

john --wordlist=/path/to/password.lst --rules mypasswds

To run in the background and specify a session in case the session is interupted, use the session option

john --session=mysessionname --wordlist=/path/to/password.lst --rules mypasswds &

See the status of a session

john --status=mysessionname

To restore a session by name

john --restore=mysessionname

If cracking linux shadow files, to only crack passwords with valid shells

john --wordlist=/path/to/password.lst --rules --shells=sh,csh,tcsh,bash mypasswds

To exclude cracking specific users

john --wordlist=/path/to/passwords.lst --rules --users=-root,me mypasswds

Incremental Passwords – this takes forever but has a higher rate of obtaining passwords that are not common words

This will use the default “incremental” mode parameters, which are defined in the configuration file’s section named either [Incremental:All] (for most hash types) or [Incremental:LanMan] (for Windows LM hashes). By default, the [Incremental:All] parameters are set to use the full printable US-ASCII character set (95 characters) and to try all possible password lengths from 0 to 8. [Incremental:LanMan] is similar, except that it takes advantage of LM hashes being case-insensitive and of their halves limited to 7 characters each.  You should see Modes at the openwall web site.

john --incremental mypasswds

Speed

A few regular visitors of my website also on my twitter send me some messages and asked about speed.  I think that speed is important of course, and you likely won’t see the speed of gpu cracking with john, but you will see decent speeds.  What I decided to do was to take my own personal dictionary file and run it through both john and hashcat against a password list I have some personal information about.

Below I am using my own custom password list file.  It is very large and I often use it when I am not enabling rules option of john.  If I am enabling rules, I use a much smaller list that keeps the time more manageable.  Info about this list:

ewiget@TSPH4GD:/pentest/passwords/wordlists$ wc -l eds.passwd.list
310,261,848 eds.passwd.list

Here are the results….first with john and the rules option used, which is pretty much guaranteed to get the most passwords cracked….but I aborted this because I mostly wanted to show that it was going to take a very long time – from February 10 to April 8th, estimated:

ewiget@TSPH4GD:/pentest/passwords/john-1.7.9-jumbo-5/run$ ./john --wordlist=/pentest/passwords/wordlists/eds.passwd.list --rules --shells=sh,csh,tcsh,bash /home/ewiget/mypasswds
Loaded 20 password hashes with 20 different salts (FreeBSD MD5 [SSE2i 12x])
guesses: 0  time: 0:00:00:15 0.00%  c/s: 8489  trying: 0u75pi7 - 0u7c14m012
guesses: 0  time: 0:10:06:35 0.10% (ETA: Mon Apr  8 07:02:49 2013)  c/s: 9731  trying: 367799 - 3675906
guesses: 0  time: 0:10:07:09 0.10% (ETA: Mon Apr  8 16:29:29 2013)  c/s: 9731  trying: 3561040 - 355tied616
Session aborted

And then this one without the rules option enabled (I will update this with hashcat after this completes….and yes, that is in at least X more days because the value of X is unknown / estimated right now). This one was started on February 12 and says it will end on Feb 20, 8 days:
ewiget@TSPH4GD:/pentest/passwords/john-1.7.9-jumbo-5/run$ ./john --wordlist=/pentest/passwords/wordlists/eds.passwd.list --shells=sh,csh,tcsh,bash /home/ewiget/mypasswds
Loaded 20 password hashes with 20 different salts (FreeBSD MD5 [SSE2i 12x])
guesses: 0  time: 0:00:10:24 0.09% (ETA: Mon Feb 20 11:02:26 2012)  c/s: 9346  trying: Pan-scandinavia - Pantheian
guesses: 0  time: 0:01:10:32 0.63% (ETA: Mon Feb 20 05:02:39 2012)  c/s: 9317  trying: SPECIOUS - SPITBOL

]]> http://www.edwiget.name/2012/02/backtrack-john-the-ripper-tips-examples/feed/ 1 Backtrack: Multicore Processor Password Cracking With John The Ripper http://www.edwiget.name/2012/02/backtrack-multicore-processor-password-cracking-with-john-the-ripper/?utm_source=rss&utm_medium=rss&utm_campaign=backtrack-multicore-processor-password-cracking-with-john-the-ripper http://www.edwiget.name/2012/02/backtrack-multicore-processor-password-cracking-with-john-the-ripper/#comments Sat, 11 Feb 2012 07:43:23 +0000 edwigetadmin http://www.edwiget.name/?p=451 [...]]]> Lets face it, John the Ripper has been around a long time and the reason its been around a long time is because its damn good at cracking passwords.  Yea, hashcat and oclhashcat are great for gpu cracking, but it doesn’t support as many algorithms as JTR.  So, imagine my surprise when I fire up John The Ripper on backtrack 5 64 bit and find out it is using a single CPU.  That is letting a potential 75% of my system sit there wanting to do something.  Luckily the fix is easier than fixing a sandwich.

If you already have jtr installed, you may want to see my john tips article.

First, lets grab the jumbo sourcecode….

cd /pentest/passwords ; wget http://www.openwall.com/john/g/john-1.7.9-jumbo-5.tar.gz

Then lets extract it….

tar xzfvp john-1.7.9-jumbo-5.tar.gz

Then switch to the src directory…..

cd john-1.7.9-jumbo-5/src

Next, open the Makefile in whatever text editor you use, I use vi…..and uncomment the two lines listed below under # gcc with OpenMP….

# gcc with OpenMP
OMPFLAGS = -fopenmp
OMPFLAGS = -fopenmp -msse2

If you are not building this for 64 bit linux with sse optimizations, then type make without any options to get the list of targets, otherwise, run the command below…

make linux-x86-64

When that completes, run the test from the ../run directory….

cd ../run
./john --test

It will spit out some test results…..run with however many cores you have on your system by default….(4xOMP) signifies 4 cores using OMP… (test results below)

So, now we have it using up all our cores, lets assume you only want it to use 2 cores out of a 4 core cpu…..use this string and replace the 2 with the number of cores to enable:

OMP_NUM_THREADS=2 ./john --test
Benchmarking: Traditional DES [128/128 BS SSE2-16]... (4xOMP) DONE
Many salts:	8454K c/s real, 2173K c/s virtual
Only one salt:	7105K c/s real, 1840K c/s virtual
 
Benchmarking: BSDI DES (x725) [128/128 BS SSE2-16]... (4xOMP) DONE
Many salts:	290978 c/s real, 74590 c/s virtual
Only one salt:	273408 c/s real, 70104 c/s virtual
 
Benchmarking: FreeBSD MD5 [SSE2i 12x]... (4xOMP) DONE
Raw:	10455 c/s real, 2673 c/s virtual
 
Benchmarking: OpenBSD Blowfish (x32) [32/64 X2]... (4xOMP) DONE
Raw:	2685 c/s real, 690 c/s virtual
 
Benchmarking: Kerberos AFS DES [48/64 4K]... DONE
Short:	379904 c/s real, 351762 c/s virtual
Long:	1065K c/s real, 1065K c/s virtual
 
Benchmarking: LM DES [128/128 BS SSE2-16]... (4xOMP) DONE
Raw:	41123K c/s real, 10571K c/s virtual
 
Benchmarking: dynamic_0: md5($p)  (raw-md5)  [SSE2i 10x4x3]... DONE
Raw:	2712K c/s real, 2466K c/s virtual
 
Benchmarking: dynamic_1: md5($p.$s)  (joomla)  [SSE2i 10x4x3]... DONE
Many salts:	2552K c/s real, 2552K c/s virtual
Only one salt:	2364K c/s real, 2388K c/s virtual
 
Benchmarking: dynamic_2: md5(md5($p))  (e107)  [SSE2i 10x4x3]... DONE
Raw:	1341K c/s real, 1354K c/s virtual
 
Benchmarking: dynamic_3: md5(md5(md5($p)))  [SSE2i 10x4x3]... DONE
Raw:	891360 c/s real, 900363 c/s virtual
 
Benchmarking: dynamic_4: md5($s.$p)  (OSC)  [SSE2i 10x4x3]... DONE
Many salts:	2545K c/s real, 2571K c/s virtual
Only one salt:	2365K c/s real, 2365K c/s virtual
 
Benchmarking: dynamic_5: md5($s.$p.$s)  [SSE2i 10x4x3]... DONE
Many salts:	2441K c/s real, 2466K c/s virtual
Only one salt:	2253K c/s real, 2253K c/s virtual
 
Benchmarking: dynamic_6: md5(md5($p).$s)  [SSE2i 10x4x3]... DONE
Many salts:	2698K c/s real, 2726K c/s virtual
Only one salt:	1257K c/s real, 1257K c/s virtual
 
Benchmarking: dynamic_8: md5(md5($s).$p)  [SSE2i 10x4x3]... DONE
Many salts:	2566K c/s real, 2592K c/s virtual
Only one salt:	2380K c/s real, 2380K c/s virtual
 
Benchmarking: dynamic_9: md5($s.md5($p))  [SSE2i 10x4x3]... DONE
Many salts:	2523K c/s real, 2523K c/s virtual
Only one salt:	1213K c/s real, 1213K c/s virtual
 
Benchmarking: dynamic_10: md5($s.md5($s.$p))  [SSE2i 10x4x3]... DONE
Many salts:	1274K c/s real, 1274K c/s virtual
Only one salt:	1225K c/s real, 1225K c/s virtual
 
Benchmarking: dynamic_11: md5($s.md5($p.$s))  [SSE2i 10x4x3]... DONE
Many salts:	1281K c/s real, 1281K c/s virtual
Only one salt:	1231K c/s real, 1231K c/s virtual
 
Benchmarking: dynamic_12: md5(md5($s).md5($p))  (IPB)  [SSE2i 10x4x3]... DONE
Many salts:	3159K c/s real, 3159K c/s virtual
Only one salt:	1299K c/s real, 1299K c/s virtual
 
Benchmarking: dynamic_13: md5(md5($p).md5($s))  [SSE2i 10x4x3]... DONE
Many salts:	3119K c/s real, 3119K c/s virtual
Only one salt:	1298K c/s real, 1311K c/s virtual
 
Benchmarking: dynamic_14: md5($s.md5($p).$s)  [SSE2i 10x4x3]... DONE
Many salts:	2433K c/s real, 2433K c/s virtual
Only one salt:	1217K c/s real, 1229K c/s virtual
 
Benchmarking: dynamic_15: md5($u.md5($p).$s)  [64x2 (MD5_Body)]... DONE
Many salts:	6595K c/s real, 6595K c/s virtual
Only one salt:	3331K c/s real, 3331K c/s virtual
 
Benchmarking: dynamic_16: md5(md5(md5($p).$s).$s2)  [64x2 (MD5_Body)]... DONE
Many salts:	3876K c/s real, 3876K c/s virtual
Only one salt:	2207K c/s real, 2207K c/s virtual
 
Benchmarking: dynamic_17: phpass ($P$ or $H$)  [SSE2i 2x4x3]... DONE
Raw:	1378 c/s real, 1378 c/s virtual
 
Benchmarking: dynamic_18: md5($s.Y.$p.0xF7.$s) (Post.Office MD5)  [64x2 (MD5_Body)]... DONE
Many salts:	3234K c/s real, 3234K c/s virtual
Only one salt:	2901K c/s real, 2901K c/s virtual
 
Benchmarking: dynamic_19: Cisco PIX (MD5) [SSE2i 10x4x3]... DONE
Raw:	2469K c/s real, 2469K c/s virtual
 
Benchmarking: dynamic_20: Cisco PIX (MD5 salted) [SSE2i 10x4x3]... DONE
Many salts:	2549K c/s real, 2549K c/s virtual
Only one salt:	2356K c/s real, 2356K c/s virtual
 
Benchmarking: dynamic_21: HTTP Digest Access Auth [SSE2i 10x4x3]... DONE
Many salts:	1077K c/s real, 1077K c/s virtual
Only one salt:	1052K c/s real, 1052K c/s virtual
 
Benchmarking: dynamic_22: md5(sha1($p)) [SSE2i 10x4x3]... DONE
Raw:	1618K c/s real, 1618K c/s virtual
 
Benchmarking: dynamic_23: sha1(md5($p)) [SSE2i 10x4x3]... DONE
Raw:	1605K c/s real, 1605K c/s virtual
 
Benchmarking: dynamic_24: sha1($p.$s) [SSE2i 10x4x3]... DONE
Many salts:	4817K c/s real, 4817K c/s virtual
Only one salt:	4035K c/s real, 4035K c/s virtual
 
Benchmarking: dynamic_25: sha1($s.$p) [SSE2i 10x4x3]... DONE
Many salts:	4616K c/s real, 4616K c/s virtual
Only one salt:	4092K c/s real, 4092K c/s virtual
 
Benchmarking: dynamic_26: sha1($p) raw-sha1 [4x1]... DONE
Raw:	5605K c/s real, 5605K c/s virtual
 
Benchmarking: dynamic_27: FreeBSD MD5 [SSE2i 4x3]... DONE
Raw:	2724 c/s real, 2724 c/s virtual
 
Benchmarking: dynamic_28: Apache MD5 [SSE2i 4x3]... DONE
Raw:	2736 c/s real, 2736 c/s virtual
 
Benchmarking: dynamic_29: md5(unicode($p)) [SSE2i 10x4x3]... DONE
Raw:	2479K c/s real, 2504K c/s virtual
 
Benchmarking: dynamic_1001 md5(md5(md5(md5($p)))) [SSE2i 10x4x3]... DONE
Raw:	666480 c/s real, 673212 c/s virtual
 
Benchmarking: dynamic_1002 md5(md5(md5(md5(md5($p))))) [SSE2i 10x4x3]... DONE
Raw:	532440 c/s real, 532440 c/s virtual
 
Benchmarking: dynamic_1003 md5(md5($p).md5($p)) [64x2 (MD5_Body)]... DONE
Raw:	1968K c/s real, 1988K c/s virtual
 
Benchmarking: dynamic_1004 md5(md5(md5(md5(md5(md5($p)))))) [SSE2i 10x4x3]... DONE
Raw:	443160 c/s real, 443160 c/s virtual
 
Benchmarking: dynamic_1005 md5(md5(md5(md5(md5(md5(md5($p))))))) [SSE2i 10x4x3]... DONE
Raw:	379800 c/s real, 379800 c/s virtual
 
Benchmarking: dynamic_1006 md5(md5(md5(md5(md5(md5(md5(md5($p)))))))) [SSE2i 10x4x3]... DONE
Raw:	332400 c/s real, 332400 c/s virtual
 
Benchmarking: dynamic_1008 md5($p.$s) [RADIUS User-Password] [SSE2i 10x4x3]... DONE
Many salts:	2550K c/s real, 2575K c/s virtual
Only one salt:	2361K c/s real, 2361K c/s virtual
 
Benchmarking: dynamic_1009 md5($s.$p) [RADIUS Responses] [SSE2i 10x4x3]... DONE
Many salts:	2621K c/s real, 2647K c/s virtual
Only one salt:	2434K c/s real, 2410K c/s virtual
 
Benchmarking: Eggdrop [blowfish]... DONE
Raw:	24739 c/s real, 24988 c/s virtual
 
Benchmarking: CRC-32 [32/64]... (4xOMP) DONE
Many salts:	145850K c/s real, 39525K c/s virtual
Only one salt:	20807K c/s real, 6382K c/s virtual
 
Benchmarking: DIGEST-MD5 [DIGEST-MD5 authentication]... DONE
Many salts:	1308K c/s real, 1200K c/s virtual
Only one salt:	1308K c/s real, 1308K c/s virtual
 
Benchmarking: More Secure Internet Password [RSA MD defined by BSAFE 1.x - Lotus v6]... DONE
Many salts:	79975 c/s real, 80782 c/s virtual
Only one salt:	47417 c/s real, 47417 c/s virtual
 
Benchmarking: EPiServer SID Hashes [SHA-1]... DONE
Many salts:	4366K c/s real, 4410K c/s virtual
Only one salt:	4120K c/s real, 4120K c/s virtual
 
Benchmarking: HTTP Digest access authentication [HDAA-MD5]... DONE
Many salts:	1419K c/s real, 1433K c/s virtual
Only one salt:	1381K c/s real, 1381K c/s virtual
 
Benchmarking: HMAC MD5 [SSE2i 12x]... DONE
Raw:	706392 c/s real, 706392 c/s virtual
 
Benchmarking: IPB2 MD5 [Invision Power Board 2.x salted MD5]... DONE
Many salts:	2912K c/s real, 2912K c/s virtual
Only one salt:	1801K c/s real, 1801K c/s virtual
 
Benchmarking: Kerberos v4 TGT [krb4 DES]... DONE
Raw:	2451K c/s real, 2451K c/s virtual
 
Benchmarking: Kerberos v5 TGT [krb5 3DES (des3-cbc-sha1)]... DONE
Raw:	40663 c/s real, 40663 c/s virtual
 
Benchmarking: Lotus5 [Lotus v5 Proprietary]... (4xOMP) DONE
Raw:	949248 c/s real, 254490 c/s virtual
 
Benchmarking: Generic salted MD4 [32/64]... DONE
Many salts:	6823K c/s real, 6203K c/s virtual
Only one salt:	6022K c/s real, 6022K c/s virtual
 
Benchmarking: MediaWiki -- md5($s.'-'.md5($p)) [SSE2i 10x4x3]... DONE
Many salts:	2559K c/s real, 2585K c/s virtual
Only one salt:	1220K c/s real, 1220K c/s virtual
 
Benchmarking: M$ Cache Hash [Generic 1x]... (4xOMP) DONE
Many salts:	34383K c/s real, 9024K c/s virtual
Only one salt:	12105K c/s real, 3185K c/s virtual
 
Benchmarking: M$ Cache Hash 2 (DCC2) [SSE2i 4x]... (4xOMP) DONE
Raw:	807 c/s real, 225 c/s virtual
 
Benchmarking: MSCHAPv2 C/R MD4 DES [mschapv2]... (4xOMP) DONE
Many salts:	6938K c/s real, 1885K c/s virtual
Only one salt:	4379K c/s real, 1170K c/s virtual
 
Benchmarking: MS Kerberos 5 AS-REQ Pre-Auth [mskrb5]... (4xOMP) DONE
Many salts:	2100K c/s real, 560059 c/s virtual
Only one salt:	1205K c/s real, 319694 c/s virtual
 
Benchmarking: MS-SQL05 [SSE2i 4x]... DONE
Many salts:	6423K c/s real, 5893K c/s virtual
Only one salt:	5777K c/s real, 5777K c/s virtual
 
Benchmarking: MS-SQL [SSE2i 4x]... DONE
Many salts:	6424K c/s real, 6424K c/s virtual
Only one salt:	4752K c/s real, 4752K c/s virtual
 
Benchmarking: MYSQL_fast [mysql-fast]... DONE
Raw:	19611K c/s real, 19611K c/s virtual
 
Benchmarking: MYSQL [mysql]... DONE
Raw:	2730K c/s real, 2730K c/s virtual
 
Benchmarking: MySQL 4.1 double-SHA-1 [SSE2i 4x]... DONE
Raw:	2913K c/s real, 2943K c/s virtual
 
Benchmarking: LM C/R DES [netlm]... (4xOMP) DONE
Many salts:	8024K c/s real, 2100K c/s virtual
Only one salt:	884736 c/s real, 244402 c/s virtual
 
Benchmarking: LMv2 C/R MD4 HMAC-MD5 [netlmv2]... (4xOMP) DONE
Many salts:	2476K c/s real, 660275 c/s virtual
Only one salt:	1778K c/s real, 475585 c/s virtual
 
Benchmarking: NTLMv1 C/R MD4 DES [ESS MD5] [netntlm]... (4xOMP) DONE
Many salts:	7295K c/s real, 1954K c/s virtual
Only one salt:	3723K c/s real, 1031K c/s virtual
 
Benchmarking: NTLMv2 C/R MD4 HMAC-MD5 [netntlmv2]... (4xOMP) DONE
Many salts:	2457K c/s real, 640000 c/s virtual
Only one salt:	1687K c/s real, 450013 c/s virtual
 
Benchmarking: HalfLM C/R DES [nethalflm]... (4xOMP) DONE
Many salts:	7581K c/s real, 2005K c/s virtual
Only one salt:	1327K c/s real, 367618 c/s virtual
 
Benchmarking: Netscreen MD5 [NS MD5]... DONE
Raw:	4477K c/s real, 4107K c/s virtual
 
Benchmarking: Netscape LDAP SHA [SSE2i 4x]... DONE
Raw:	5979K c/s real, 5979K c/s virtual
 
Benchmarking: NT v2 [SSE2i 12x]... DONE
Raw:	4112K c/s real, 4112K c/s virtual
 
Benchmarking: NT MD4 [128/128 X2 SSE2-16]... DONE
Raw:	21758K c/s real, 21758K c/s virtual
 
Benchmarking: Oracle 11g [oracle11]... DONE
Many salts:	4237K c/s real, 4237K c/s virtual
Only one salt:	3689K c/s real, 3689K c/s virtual
 
Benchmarking: Oracle [oracle]... DONE
Raw:	707729 c/s real, 707729 c/s virtual
 
Benchmarking: PHPass MD5 [SSE2i 2x4x3]... DONE
Raw:	1392 c/s real, 1392 c/s virtual
 
Benchmarking: PHPS -- md5(md5($pass).$salt) [SSE2i 10x4x3]... DONE
Many salts:	2718K c/s real, 2718K c/s virtual
Only one salt:	1256K c/s real, 1256K c/s virtual
 
Benchmarking: PIX MD5 [SSE2i 10x4x3]... DONE
Many salts:	2487K c/s real, 2487K c/s virtual
Only one salt:	2490K c/s real, 2516K c/s virtual
 
Benchmarking: pkzip [N/A]... (4xOMP) DONE
Many salts:	24015K c/s real, 6286K c/s virtual
Only one salt:	11242K c/s real, 2982K c/s virtual
 
Benchmarking: Post.Office MD5 [STD]... DONE
Many salts:	3167K c/s real, 2932K c/s virtual
Only one salt:	3012K c/s real, 3012K c/s virtual
 
Benchmarking: Raw MD4 [SSE2i 12x]... DONE
Raw:	4103K c/s real, 4144K c/s virtual
 
Benchmarking: Raw MD5 [SSE2i 12x]... DONE
Raw:	2715K c/s real, 2743K c/s virtual
 
Benchmarking: Raw MD5 [SSE2i 10x4x3]... DONE
Raw:	2686K c/s real, 2686K c/s virtual
 
Benchmarking: md5(unicode($p)) [SSE2i 10x4x3]... DONE
Raw:	2485K c/s real, 2485K c/s virtual
 
Benchmarking: Raw SHA-1 [SSE2i 4x]... DONE
Raw:	5431K c/s real, 5431K c/s virtual
 
Benchmarking: Raw SHA [32/64]... DONE
Raw:	3634K c/s real, 3634K c/s virtual
 
Benchmarking: Salted SHA-1 [SSE2i 4x]... DONE
Many salts:	6057K c/s real, 6057K c/s virtual
Only one salt:	5394K c/s real, 5448K c/s virtual
 
Benchmarking: SAP BCODE [sapb]... (4xOMP) DONE
Many salts:	6232K c/s real, 1657K c/s virtual
Only one salt:	5225K c/s real, 1374K c/s virtual
 
Benchmarking: SAP CODVN G (PASSCODE) [sapg]... (4xOMP) DONE
Many salts:	4560K c/s real, 1206K c/s virtual
Only one salt:	2543K c/s real, 731897 c/s virtual
 
Benchmarking: Generic salted SHA-1 [32/64]... DONE
Many salts:	4122K c/s real, 3782K c/s virtual
Only one salt:	3813K c/s real, 3813K c/s virtual
 
Benchmarking: Mac OS X 10.4 - 10.6 salted SHA-1 [32/64]... (4xOMP) DONE
Many salts:	14298K c/s real, 3713K c/s virtual
Only one salt:	9988K c/s real, 2663K c/s virtual
 
Benchmarking: Raw SHA-224 [32/64]... DONE
Raw:	2098K c/s real, 1907K c/s virtual
 
Benchmarking: Raw SHA-256 [32/64]... DONE
Raw:	2092K c/s real, 2113K c/s virtual
 
Benchmarking: Raw SHA-384 [64/64]... DONE
Raw:	1661K c/s real, 1678K c/s virtual
 
Benchmarking: Raw SHA-512 [64/64]... DONE
Raw:	1644K c/s real, 1644K c/s virtual
 
Benchmarking: Mac OS X 10.7+ salted SHA-512 [64/64]... (4xOMP) DONE
Many salts:	3587K c/s real, 1038K c/s virtual
Only one salt:	547485 c/s real, 195392 c/s virtual
 
Benchmarking: hmailserver [32/64]... DONE
Many salts:	2155K c/s real, 1977K c/s virtual
Only one salt:	2046K c/s real, 2046K c/s virtual
 
Benchmarking: sybasease [32/64]... (4xOMP) DONE
Many salts:	854976 c/s real, 227993 c/s virtual
Only one salt:	788544 c/s real, 209719 c/s virtual
 
Benchmarking: generic crypt(3) DES [?/64]... (4xOMP) DONE
Many salts:	664416 c/s real, 177177 c/s virtual
Only one salt:	601536 c/s real, 162577 c/s virtual
 
Benchmarking: Tripcode DES [48/64 4K]... DONE
Raw:	280192 c/s real, 259437 c/s virtual
 
Benchmarking: ssh [32/64]... DONE
Raw:	182976 c/s real, 182976 c/s virtual
 
Benchmarking: pdf [32/64]... DONE
Many salts:	16939 c/s real, 16939 c/s virtual
Only one salt:	34731 c/s real, 34731 c/s virtual
 
Benchmarking: rar [32/64]... DONE
Raw:	33.6 c/s real, 33.6 c/s virtual
 
Benchmarking: zip [32/64]... (4xOMP) DONE
Raw:	1882 c/s real, 528 c/s virtual
 
Benchmarking: dummy [N/A]... DONE
Raw:	79548K c/s real, 72317K c/s virtual
]]> http://www.edwiget.name/2012/02/backtrack-multicore-processor-password-cracking-with-john-the-ripper/feed/ 1 Arch Linux: Generating Entropy http://www.edwiget.name/2012/02/arch-linux-generating-entropy/?utm_source=rss&utm_medium=rss&utm_campaign=arch-linux-generating-entropy http://www.edwiget.name/2012/02/arch-linux-generating-entropy/#comments Sun, 05 Feb 2012 19:40:00 +0000 edwigetadmin http://www.edwiget.name/?p=448 [...]]]> When you upgrade pacman, you will get a message that says “run pacman –init” and when you do from a console (like on a remote server), you will then be presented with the following message:

# pacman-key --init
gpg: Generating pacman keychain master key...
 
Not enough random bytes available.  Please do some other work to give
the OS a chance to collect more entropy! (Need 282 more bytes)

There are numerous ways to generate entropy in Linux.  Here are the ways I usually try in order because sometimes one will work right away and other times it won’t:

  1. Log in to the server in another console and leave the message on your screen.
  2. If you have the mlocate package installed, run the updatedb command…other wise go to step 3 (or install using ‘pacman -S mlocate’
  3. ls -R /
  4. find / -type f -exec ls -lta “{}” \;

Usually one of those three commands will get it done.

]]> http://www.edwiget.name/2012/02/arch-linux-generating-entropy/feed/ 0 Corel Purchases Bibble Pro (linux, windows, mac RAW Editor / DAM software) http://www.edwiget.name/2012/02/corel-purchases-bibble-pro-linux-windows-mac-raw-editor-dam-software/?utm_source=rss&utm_medium=rss&utm_campaign=corel-purchases-bibble-pro-linux-windows-mac-raw-editor-dam-software http://www.edwiget.name/2012/02/corel-purchases-bibble-pro-linux-windows-mac-raw-editor-dam-software/#comments Sun, 05 Feb 2012 19:30:43 +0000 edwigetadmin http://www.edwiget.name/?p=443 [...]]]> I had reviewed bibble labs bibble pro software several times as a solution to Digikam, Lightroom, etc in Linux.  Most recently I tried the bibble labs pro v5 series in October.  I was ready to shell out the $299 but for the life of me couldn’t figure out how to order the software from their website (and I am an IT person).  Anyways, Corel software purchased Bibble Pro in January 2012 and released it under the new name Aftershot Pro.  They also reduced the price down to $99 (or $79 if you are upgrading or have a license version of lightroom).

I immediately bought a license….and you know, if Adobe would release Photoshop for Linux, I would do the same thing.

]]> http://www.edwiget.name/2012/02/corel-purchases-bibble-pro-linux-windows-mac-raw-editor-dam-software/feed/ 0 Quick Script To Enumerate SNMP http://www.edwiget.name/2012/02/quick-script-to-enumerate-snmp/?utm_source=rss&utm_medium=rss&utm_campaign=quick-script-to-enumerate-snmp http://www.edwiget.name/2012/02/quick-script-to-enumerate-snmp/#comments Sat, 04 Feb 2012 21:48:13 +0000 edwigetadmin http://www.edwiget.name/?p=440 I created this because I always forget the command to enumerate snmp and I am often too lazy to read man pages :) 

#!/bin/bash
 
# By Ed Wiget
# This script takes an input ip or domain and performs a snmpwalk using common community strings
# 20120204 - initial script
 
function proghelp (){
	echo ""
	echo ""
	echo "Help:"
	echo "./eds-smtpwalk.sh ip_address"
	echo ""
	echo "Example:"
	echo "./eds-smtpwalk.sh 127.0.0.1"
	echo ""
	echo ""
}
 
if [ $# -ne 1 ]
then
clear
proghelp
exit
fi
 
# set up the first input value
if [ "$1" == "" ]; then
 
        echo "What is the ip address to query?"
        read SVRIP
else
        SVRIP=$1
fi
 
if [ -f wordlist-common-snmp-community-strings.txt ]; then
	for COMSTG in `cat wordlist-common-snmp-community-strings.txt`
		do
# removed below in favor of auto list
# set up the second input value
#if [ "$2" == "" ]; then
#        echo "What is the community string?"
#        read COMSTG
#else
#	COMSTG=$2
#fi
 
		snmpwalk -v2c -c ${COMSTG} $1 system
	done
 
else
 
echo "wordlist-common-snmp-community-strings.txt does not exist.......fetching now......please wait"
echo ""
wget http://fuzzdb.googlecode.com/svn/trunk/wordlists-misc/wordlist-common-snmp-community-strings.txt
echo ""
echo "please run again....."
fi
]]> http://www.edwiget.name/2012/02/quick-script-to-enumerate-snmp/feed/ 0 E-cigs: Part 5 : Traceable Costs http://www.edwiget.name/2012/02/e-cigs-part-5-traceable-costs/?utm_source=rss&utm_medium=rss&utm_campaign=e-cigs-part-5-traceable-costs http://www.edwiget.name/2012/02/e-cigs-part-5-traceable-costs/#comments Fri, 03 Feb 2012 09:32:07 +0000 edwigetadmin http://www.edwiget.name/?p=421 [...]]]> You should see:

Part 1 – why i quit smoking (yea, I can say that now)

Part 2 – my first e-cig kit order and its problems

Part 3 – the upgrade kit that has been a dream

Part 4 – the flavor quest

So today I placed an order for some needed parts from my favorite e-cig supplier modern vapor for the lux kit.  If you want to order that kit, see the part 3 link above.  It has a link to it much like the parts I ordered below (and by the way, I do not work for and am not affiliated with modern vapor in any way.  I am just a happy customer showing huge progress in health since switching to e-cigs).

My most recent order consisted of:

Items Ordered: Price: Status:
$19.90 Processing
$3.75 Processing
$10.95 Processing
$12.49 Processing
$6.95 Processing
$6.95 Processing

The total cost of the order with shipping was $69.  It made me wonder, how much money have I spent on e-cigs and how much money would I have spent on regular cigarettes.  Knowing I spent $55 a week on cigarettes, it was just a matter of figuring out how many weeks had passed since I started using e-cigs (15 weeks) then tallying up the cost of the e-cig kits and supplies (which I have included in each post where I made an order)….but first, let me talk about the current order.

You will notice I have a replenish stock of cherry and a new apple flavor in the order above.  I have to admit, cherry and apple mixed together is my favorite ejuice mix.  They are both good by themselves, but something about mixing them just makes the flavor rock!  I am completely out of apple but I still have about two weeks of cherry left (based on daily usage).  I also still have a lot of the other e-juices left, nearly 4 full 10ml bottles and 1-1/2 full 20ml bottles but the aren’t my favorites.   I also still have approx two weeks left of caramel and cappaccino e-juice.  And, still on my quest for the ultimate e-juice, I added a new blueberry flavor :)

So the real reason I was placing this order is that now my original 2 oem atomizers for the lux kit have gone bad (remember I ordered the lux kit the first week of november and they are only supposed to last about 3 weeks), and I only have one still new in the package dual coil cartimizer left (but I did ruin one by accident and the one I am using now has only been in for about a week).  The dual coil cartimizers also last about 3 weeks each.  I still haven’t decided if I prefer the dual-coil cartimizers or atomizers the best.  One thing I can tell you is this:  the dual coil atomizers will leak if you over fill them, the atomizers will not.  With that in mind, since I wanted to try drip tips, it would seem like atomizers are best suited for use with them….but just in case I am wrong, I have both.

The other thing is, I wanted to do the comparison of e-cig cost vs regular cig cost since I have now been using e-cigs about 15 weeks.

This is my breakdown of my e-cig costs to present:

10-24-2011 – $149.85
11-03-2011 – $106.70
12-05-2011 – $75.90
02-03-2012 – $68.94

For a grand total of 401.39.

Since I smoked a carton of marlboro reds each week at a cost of $55 per carton, and I have used e-cigs for 15 weeks now, we can say I would have spent 15 * 55 = $825.

Obviously, the cost of smoking real cigarettes is higher than the e-cigs, so we subtract the e-cig price from real cig price and get a savings of $423.61

The above savings should continue to go up because all of my upfront expensive kit costs are out of the way.  Technically, I should probably throw away the first order cost and assume a 14 week savings because the first kit was just a mistake since I didnt know what I was ordering and that I didnt really need all that stuff.  If I did that, then the savings goes up slightly.  But what you can notice from above is that each order gets smaller and smaller.

I am also going to guess that the last order above will probably be the average cost over a 3 month period.  I mean, the original two atomizers and 5 dual coil cartimizers lasted about three months so these replacements should too.  I definitely have enough ejuice to last three months.

Healthier??  Absolutely!

One thing that I forgot is that every year in January I take a stress test.  If you don’t know what a stress test is, basically you are given a series of strenuous workouts to be completed within a specific time period and then a cool down period all the while measuring your heart rate.  Apparently doctors can determine how “in-shape” or “out-of-shape” you are by these values.  They are also key indicators to how at risk you may be to a heart attack and the test is known to have caused people to have heart attacks (like my father who also passed away shortly after having a heart attack brought on by a stress test).  Why does this matter in an e-cig blog?  Because my heart rate this time last year was 167 beats per minute and this year was only 126 beats per minute.

If you recall, I started using e-cigs the last part of october 2011.  The reason was my fear of having a heart attack simply because I was out of breath before I reached the top step of my apartment floor (I only live on the second floor and its maybe 10 or so steps).  Lately I half-jog up the steps.  I can assure you this would have been nearly impossible just a few months ago.

I think these two things are very important in showing that yes, e-cigs are obviously better for you.

Sometimes I Do Slip

As with any good thing, sometimes I slip up.  I don’t really know why or what causes it, but here is an example:  for the entire month of January 2012 I did not have a single real cigarette.  However, three days in February 2012 I had a single cigarette each day.  I wasn’t really craving a cigarette.  I think it was just a matter of opportunity…..they were available, I was there, the person who had them would give me one.  Back in November and December, I really had a hard time not smoking if I was in a club or bar.  But I didnt have any problems in a bar or club in January 2012.

Either way, I am totally happy that I am saving money by using e-cigs, my health is obviously improving, and I am not grouchy or going through nicotine withdrawals like times in the past.  Are e-cigs healthier than NOT SMOKING at all?  I am going to guess probably not.  There could theoretically be bad things in nicotine yet to be discovered.  I am going to be really pissed though if I die from some unknown reason due to using e-cigs (that I would not have died from smoking real cigarettes).  What could that be?  I don’t really know….maybe the battery will explode and it will be ingested in some way.  Maybe the base Propylene Glycol which is also used in cake mix, medical solutions, and other things is more harmful than the 4,000 other ingredients found in real cigarettes.  Who knows, maybe Vegetable Glycerin used in VG based e-juice is bad for you?

]]> http://www.edwiget.name/2012/02/e-cigs-part-5-traceable-costs/feed/ 1 Fixing Dropbox Will Not Sync http://www.edwiget.name/2012/01/fixing-dropbox-will-not-sync/?utm_source=rss&utm_medium=rss&utm_campaign=fixing-dropbox-will-not-sync http://www.edwiget.name/2012/01/fixing-dropbox-will-not-sync/#comments Fri, 27 Jan 2012 02:33:03 +0000 edwigetadmin http://www.edwiget.name/?p=404 [...]]]> 
#!/bin/bash
 
# By Ed Wiget
# This fixes dropbox sync issues on linux
 
# get a list of files executable now
find ~/Dropbox -type f -perm -u+x > /tmp/dropbox_files-`date +%Y%m%d`
 
# fix the permissions
sudo chown -R $USER ~/Dropbox
sudo chmod -R u+rw ~/Dropbox
sudo chown -R $USER ~/.dropbox
sudo chmod -R u+rw ~/.dropbox
 
# remove any conflicting files from the file list above step 1
grep -v -e "conflicted copy" -e "Case Conflict" /tmp/dropbox_files-`date +%Y%m%d` > /tmp/dropbox_files-`date +%Y%m%d`.txt
# set the executable permissions back
for files in `echo /tmp/dropbox_files-\`date +%Y%m%d\`.txt` ; do chmod u+x "${files}" ; done
 
# remove any files that are in conflict
find ~/Dropbox -type f -name \*"conflicted copy"\* -exec rm -f "{}" \;
find ~/Dropbox -type f -name \*"Case Conflict"\* -exec rm -f "{}" \;
 
# remove temp files
rm -f /tmp/dropbox_files-`date +%Y%m%d`
rm -f /tmp/dropbox_files-`date +%Y%m%d`.txt
Sometimes you will run into an issue where you have multiple computers that mysteriously stop syncing with dropbox. What I have found is it is almost always caused by 1 of 2 things……file permissions, conflicts. I have 8 devices syncing to my dropbox, and every single one of them are linux except for one. It seems as though anytime I use my sole Windows computer to add something to dropbox….the others mess up. I suspect an issue with linux file permissions and windows ntfs drives.

Anyways, this script will fix the problems. Make sure you adjust the path if your linux install does not have dropbox at ~/Dropbox.

]]> http://www.edwiget.name/2012/01/fixing-dropbox-will-not-sync/feed/ 0 Disabling Headers / Banners http://www.edwiget.name/2012/01/disabling-headers/?utm_source=rss&utm_medium=rss&utm_campaign=disabling-headers http://www.edwiget.name/2012/01/disabling-headers/#comments Wed, 18 Jan 2012 07:42:11 +0000 edwigetadmin http://www.edwiget.name/?p=391 [...]]]>  

I usually don’t disable apache, php, nginx headers because to me that is just security through obscurity.

My thoughts are this…..

  1. if someone doesn’t know what version of software you are running and they decide to hack your domain or server, they will simply throw every public exploit at it that exists for said product or even simply “fingerprint” it for the correct version
  2. It makes my life easier because I can also query for those headers if for some reason I don’t remember the version of software (which saves me from logging in to the server or using other methods that might take longer – efficiency is key!)
  3. skiddies are going to throw everything at it anyways

On the flipside…..

  1. its not that hard to do
  2. if it makes your life easier then by all means do it
  3. maybe you only run a single server instead of hundreds or thousands so its easier to remember the software versions

Apache

Apache uses two different directives in the httpd.conf file.  Those two directives are:

  1. ServerTokens
  2. ServerSignature

ServerTokens controls whether the Server response header field, which is sent back to clients, includes a description of the generic OS-type of the server as well as information about compiled-in modules.  The default setting is Full.

Here is a chart that defines each setting:

    ServerTokens Setting         ServerTokens Header Example    
ProductOnly Server: Apache
Major Server: Apache/2
Minor Server: Apache/2.2
Minimal Server: Apache/2.2.19
OS Server: Apache/2.2.19 (Gentoo)
Full (Default value or not specified) Server: Apache/2.2.19 (Gentoo) PHP/5.2.17 mod_ssl/2.2.19 OpenSSL/1.0.0f

 

ServerSignature directive allows the configuration of a trailing footer line under server-generated documents (error messages, mod_proxy, ftp directory listings, etc.).  The default setting from apache is Off but some distributions may enable it.  The only three options on Off|On|Email

So to make apache give out as little information as possible, we simply add to the httpd.conf file these settings in the global config:

ServerTokens ProductOnly
ServerSignature Off

PHP
PHP has a single value that you place in the php.ini file that disables its banner. It is simply:

expose_php off

NGINX

server_tokens off
]]> http://www.edwiget.name/2012/01/disabling-headers/feed/ 0 BT5: websecurify issue in fluxbox http://www.edwiget.name/2012/01/bt5-websecurify-issue-in-fluxbox/?utm_source=rss&utm_medium=rss&utm_campaign=bt5-websecurify-issue-in-fluxbox http://www.edwiget.name/2012/01/bt5-websecurify-issue-in-fluxbox/#comments Tue, 10 Jan 2012 17:59:29 +0000 edwigetadmin http://www.edwiget.name/?p=382 [...]]]> For some reason, websecurify does not work in fluxbox…..well, it works just fine, you just can’t see the results due to a theme issue.  It definately appears related to the chrome theme used in websecurify because changing qt theme and gtk theme has no effect.  Also changing the fluxbox theme does not work and my regular chrome browser works fine.

Images below…

ws1 ws2 ws3 ws4 ws5 ws6 ws7 ]]> http://www.edwiget.name/2012/01/bt5-websecurify-issue-in-fluxbox/feed/ 0