ÈÐ Wïgê† Ðð† ñåmê http://www.edwiget.name ïñ£ð§ê¢, ïñ£ðrmå†ïðñ §ê¢µr, Ðïgï†ål £ðrêñ§ï¢§, hå¢kïñg, §¥§†êm åÐmïñ阮rå†ïðñ, lïñµx ßlðg Tue, 15 May 2012 19:43:43 +0000 en hourly 1 http://wordpress.org/?v= Script: Auditing over anonymous networks http://www.edwiget.name/2012/05/script-auditing-over-anonymous-networks/?utm_source=rss&utm_medium=rss&utm_campaign=script-auditing-over-anonymous-networks http://www.edwiget.name/2012/05/script-auditing-over-anonymous-networks/#comments Tue, 15 May 2012 18:51:53 +0000 edwigetadmin http://www.edwiget.name/?p=506 
#!/bin/bash
 
# By Ed Wiget
# This script sets up a proxy so that you can audit web servers anonymously over tor
# 20111113 - initial script (better method)
# enable next line for debugging
#set -x
 
echo "Please enter the ip address of the target host or a domain name"
read dom
 
# this checks to see if we set a domain name or ip address
# it sets the variable IP to the ip address of domain or ip entered
# if you are auditing more than .com, .net, .org, .edu addresses, you need to add them below
if [ "`echo ${dom} | egrep 'com|net|org|edu' | wc -l`" = "1" ]; then
		IP=`tor-resolve ${dom}`
	else
		IP=${dom}
fi
 
# for debugging to make sure we are setting IP correctly
#echo ${IP}
 
# here we set up a socat proxy listening on localhost port 8080
# it forwards any tcp requests to ${IP} port 80
# via the socks tor listening on localhost 9050
sudo socat TCP4-LISTEN:8080,fork SOCKS4:127.0.0.1:${IP}:80,socksport=9050 &
 
# the sleep is required or the check for listening fails below
sleep 2
 
if [ "`sudo netstat -ptane | grep 8080 | wc -l`" = "1" ]; then
	echo "proxy started successfully"
else
	echo "proxy not running"
	exit
fi
 
# here we are going to check port 80 for a web server which will likely tell us the
# operating system too via the results
sudo proxychains nmap -sT -PN -n -sV ${IP} -p80
 
# here we need to set up w3af_gui running as root in order to connect to our proxy
echo "when w3af opens, click on advanced target settings"
sleep 1
echo "set the target ip in w3af to http://127.0.0.1:8080"
sleep 1
echo "set the targetos and targetframework in w3af as returned by the nmap check above"
sleep 1
sudo /pentest/web/w3af/w3af_gui &

 

So now you can audit a web app using w3af.  If you wanted to use nessus or metasploit, just plug in the address as 127.0.0.1:8080

]]> http://www.edwiget.name/2012/05/script-auditing-over-anonymous-networks/feed/ 0 memcached http://www.edwiget.name/2012/04/memcached/?utm_source=rss&utm_medium=rss&utm_campaign=memcached http://www.edwiget.name/2012/04/memcached/#comments Wed, 11 Apr 2012 18:52:56 +0000 edwigetadmin http://www.edwiget.name/?p=500 [...]]]> When I reviewed memcached previously, I got faster performance with wp-cache than memcached…..but that was about 16 months ago.  So I decided to give it another run for the money on a few sites.  The installation is pretty simple….especially since I scripted most of it for you…..

#!/bin/bash
 
# By Ed Wiget
 
# Use this version of Libevent
LIBEVENT_VERSION='2.0.18'
# Use this version of Memcached
MEMCACHED_VERSION='1.4.13'
# Use this version of Memcache - note issues with 3.0.6
MEMCACHE_VERSION='3.0.5'
# directory to download and compile stuff
DLDIR=/tmp
# set lib directory to 64 bit
LIBDIR='lib64'
# number of cpu cores
CPUS=`cat "/proc/cpuinfo" | grep "processor"|wc -l`
# number of threads to use when compiling
MAKETHREADS=" -j$CPUS"
 
echo "*************************************************"
echo "* Installing memcached"
echo "*************************************************"
echo "Downloading memcached..."
cd ${DLDIR}
 
if [ -s libevent-${LIBEVENT_VERSION}-stable.tar.gz ]; then
    echo "libevent-${LIBEVENT_VERSION} Archive found, skipping download..."
else
    wget -c http://www.monkey.org/~provos/libevent-${LIBEVENT_VERSION}-stable.tar.gz --tries=3
fi
 
if [ -s memcached-${MEMCACHED_VERSION}.tar.gz ]; then
    echo "memcached ${MEMCACHED_VERSION} Archive found, skipping download..."
else
    wget -c http://memcached.googlecode.com/files/memcached-${MEMCACHED_VERSION}.tar.gz --tries=3
fi
 
if [ -s memcache-${MEMCACHE_VERSION}.tgz ]; then
    echo "memcache ${MEMCACHE_VERSION} Archive found, skipping download..."
else
    wget -c http://pecl.php.net/get/memcache-${MEMCACHE_VERSION}.tgz --tries=3
fi
 
echo "Compiling libevent..."
 
cd ${DLDIR}
tar xfz libevent-${LIBEVENT_VERSION}-stable.tar.gz
cd libevent-${LIBEVENT_VERSION}-stable
./configure --prefix=/usr/${LIBDIR}
make$MAKETHREADS && make install
 
echo "/usr/${LIBDIR}/lib/" > /etc/ld.so.conf.d/libevent-i386.conf
ldconfig
 
echo "Compiling memcached..."
 
cd ${DLDIR}
tar xzf memcached-${MEMCACHED_VERSION}.tar.gz
cd memcached-${MEMCACHED_VERSION}
./configure --with-libevent=/usr/${LIBDIR}
make$MAKETHREADS && make install
cp ${DLDIR}/memcached-${MEMCACHED_VERSION}/scripts/memcached-tool /usr/local/bin
 
echo "Compiling memcached..."
 
cd ${DLDIR}
cat > /etc/init.d/memcached << EOF
#!/bin/sh
# chkconfig: - 80 12
# description:  The memcached daemon is a network memory cache service.
# processname: memcached
BIN=/usr/local/bin/memcached
USER=nobody
CON=2048
THREADS=4
MINSP=48
CHUNKF=1.05
PORT1=11211
PORT2=11212
MEMSIZE=8
SERVERCOUNT=1
 
if [ -f /proc/user_beancounters ]; then
ulimit -s 256
fi
 
if [ "$SERVERCOUNT" == '2' ]; then
 
$BIN -d -m $MEMSIZE -l 127.0.0.1 -p $PORT1 -c $CON -t $THREADS -n $MINSP -f $CHUNKF -u $USER
$BIN -d -m $MEMSIZE -l 127.0.0.1 -p $PORT2 -c $CON -t $THREADS -n $MINSP -f $CHUNKF -u $USER
 
elif  [ "$SERVERCOUNT" == '1' ]; then
 
$BIN -d -m $MEMSIZE -l 127.0.0.1 -p $PORT1 -c $CON -t $THREADS -n $MINSP -f $CHUNKF -u $USER
 
fi
 
case "$1" in
start)
 
if [ "$SERVERCOUNT" == '2' ]; then
 
$BIN -d -m $MEMSIZE -l 127.0.0.1 -p $PORT1 -c $CON -t $THREADS -n $MINSP -f $CHUNKF -u $USER
$BIN -d -m $MEMSIZE -l 127.0.0.1 -p $PORT2 -c $CON -t $THREADS -n $MINSP -f $CHUNKF -u $USER
 
elif  [ "$SERVERCOUNT" == '1' ]; then
 
$BIN -d -m $MEMSIZE -l 127.0.0.1 -p $PORT1 -c $CON -t $THREADS -n $MINSP -f $CHUNKF -u $USER
 
fi
 
;;
stop) 
 
killall $BIN
 
;;
restart)
killall $BIN
 
if [ "$SERVERCOUNT" == '2' ]; then
 
$BIN -d -m $MEMSIZE -l 127.0.0.1 -p $PORT1 -c $CON -t $THREADS -n $MINSP -f $CHUNKF -u $USER
$BIN -d -m $MEMSIZE -l 127.0.0.1 -p $PORT2 -c $CON -t $THREADS -n $MINSP -f $CHUNKF -u $USER
 
elif  [ "$SERVERCOUNT" == '1' ]; then
 
$BIN -d -m $MEMSIZE -l 127.0.0.1 -p $PORT1 -c $CON -t $THREADS -n $MINSP -f $CHUNKF -u $USER
 
fi
 
;;
esac
EOF
chmod +x /etc/init.d/memcached
chkconfig --add memcached
chkconfig --level 345 memcached on
service memcached start
 
echo "Compiling PHP memcache extension..."
 
cd ${DLDIR}
tar -xvf memcache-${MEMCACHE_VERSION}.tgz
cd memcache-${MEMCACHE_VERSION}
/usr/local/bin/phpize
./configure --enable-memcache --with-php-config=/usr/local/bin/php-config
make$MAKETHREADS && make install
echo "" >> /usr/local/lib/php.ini
echo "extension=/usr/local/lib/php/extensions/no-debug-non-zts-20090626/memcache.so" >> /usr/local/lib/php.ini
 
/etc/init.d/php-fpm restart
 
echo ""
echo "*************************************************"
echo "Setup memcached.php admin page ..."
echo "*************************************************"
 
cp -a memcache.php /usr/local/nginx/html
chown -R nginx:nginx /usr/local/nginx/html
chmod 644 /usr/local/nginx/html/memcache.php
 
sed -i "s/'ADMIN_USERNAME','memcache'/'ADMIN_USERNAME','memcacheuser'/g" /usr/local/nginx/html/memcache.php
sed -i "s/'ADMIN_PASSWORD','password'/'ADMIN_PASSWORD','memcachepass'/g" /usr/local/nginx/html/memcache.php
sed -i "s/mymemcache-server1:11211/localhost:11211/g" /usr/local/nginx/html/memcache.php
sed -i "s/mymemcache-server2:11211/localhost:11212/g" /usr/local/nginx/html/memcache.php
 
echo "Setup Memcached Server Admin Login Details for /usr/local/nginx/html/memcache.php"
echo -n "(Type username your want to set and press Enter): "
read memcacheduser
echo -n "(Type password your want to set and press Enter): "
read memcachedpassword
 
echo "current memcached username: `grep "'ADMIN_USERNAME','memcacheuser'" /usr/local/nginx/html/memcache.php | sed -e "s/define('ADMIN_USERNAME','//" | sed -e 's/\/\/ Admin Username//' | sed 's/^[ \t]*//;s/[ \t]*$//' | sed -e "s/');//"`"
echo "current memcached password: `grep "'ADMIN_PASSWORD','memcachepass'" /usr/local/nginx/html/memcache.php | sed -e "s/define('ADMIN_PASSWORD','//" | sed -e 's/\/\/ Admin Password//' | sed 's/^[ \t]*//;s/[ \t]*$//' | sed -e "s/');//"`"
 
sed -i "s/'ADMIN_USERNAME','memcacheuser'/'ADMIN_USERNAME','${memcacheduser}'/g" /usr/local/nginx/html/memcache.php
sed -i "s/'ADMIN_PASSWORD','memcachepass'/'ADMIN_PASSWORD','${memcachedpassword}'/g" /usr/local/nginx/html/memcache.php
 
echo "new memcached username: ${memcacheduser}"
echo "new memcached password: ${memcachedpassword}"
 
echo "*************************************************"
echo "* memcached installed"
echo "*************************************************"

After you have memcached installed, next is configuring wordpress.

Install the wordpress plugin Memcached

Copy the file wp-content/plugins/memcached/object-cache.php wp-content/object-cache.php

edit wp-content/object-cache.php if you are using multiple memcached servers or different ports to define each and set:

$port = 11211;
$buckets = array('127.0.0.1');

or you can also set the values in wp-config.php file at the very end….the default values are for localhost, if it is an external host, change 127.0.0.1 to the hosts ip address.

global $memcached_servers;
$memcached_servers = array(‘default’ => array(‘127.0.0.1:11211′));

If you don’t want to use the memcache.php page, there is another utility called memcached-top which you can grab from:

wget http://memcache-top.googlecode.com/files/memcache-top-v0.6
chmod +x memcache-top-v0.6
./memcache-top-v0.6
]]> http://www.edwiget.name/2012/04/memcached/feed/ 0 AppleSyncNotifier.exe – Entry Point Not Found http://www.edwiget.name/2012/04/applesyncnotifier-exe-entry-point-not-found/?utm_source=rss&utm_medium=rss&utm_campaign=applesyncnotifier-exe-entry-point-not-found http://www.edwiget.name/2012/04/applesyncnotifier-exe-entry-point-not-found/#comments Tue, 03 Apr 2012 22:02:28 +0000 edwigetadmin http://www.edwiget.name/?p=496 [...]]]> In case that your OS is Windows 7 (64 bit) and you have got the message as the following:

AppleSyncNotifier.exe – Entry Point Not Found The procedure enrty point xmlTextReaderConstName could not be located in the dynamic link library libxml2.dll

1. Open windows explorer, go to location

C:\Program Files (x86)\Common Files\Apple\Apple Application Support

2. Copy file “libxml2.dll”

3. Open new windows explorer, to to location

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support

4. Paste file “libxml2.dll” to the location.

5. Reboot your computer, it should not display those message, it should be clear.

]]> http://www.edwiget.name/2012/04/applesyncnotifier-exe-entry-point-not-found/feed/ 0 Backtrack: Upgrading Backtrack to 5R2 http://www.edwiget.name/2012/03/backtrack-upgrading-backtrack-to-5r2/?utm_source=rss&utm_medium=rss&utm_campaign=backtrack-upgrading-backtrack-to-5r2 http://www.edwiget.name/2012/03/backtrack-upgrading-backtrack-to-5r2/#comments Fri, 02 Mar 2012 21:10:50 +0000 edwigetadmin http://www.edwiget.name/?p=488 
echo "deb http://updates.repository.backtrack-linux.org revolution main microverse non-free testing" >> /etc/apt/sources.list
apt-get update
apt-get dist-upgrade

And it includes these new tools:

arduino	bluelog	bt-audit	dirb	dnschef	dpscan	easy-creds	extundelete
findmyhash	golismero	goofile	hashcat-gui	hash-identifier	hexorbase	horst	hotpatch
joomscan	killerbee	libhijack	magictree	nipper-ng	patator	pipal	pyrit
reaver	rebind	rec-studio	redfang	se-toolkit	sqlsus	sslyze	sucrack
thc-ssl-dos	tlssled	uniscan	vega	watobo	wcex	wol-e	xspy
]]> http://www.edwiget.name/2012/03/backtrack-upgrading-backtrack-to-5r2/feed/ 0 Backtrack: Upgrade to Linux Kernel 3.2.6 xrandr screen only supports 1920×1200 http://www.edwiget.name/2012/03/backtrack-upgrade-to-linux-kernel-3-2-6-xrandr-screen-only-supports-1920x1200/?utm_source=rss&utm_medium=rss&utm_campaign=backtrack-upgrade-to-linux-kernel-3-2-6-xrandr-screen-only-supports-1920x1200 http://www.edwiget.name/2012/03/backtrack-upgrade-to-linux-kernel-3-2-6-xrandr-screen-only-supports-1920x1200/#comments Fri, 02 Mar 2012 17:41:45 +0000 edwigetadmin http://www.edwiget.name/?p=482 [...]]]> After upgrading to Linux kernel 3.2.6, rebooting, reconfiguring initramfs for encrypted drives, rebooting again, and reinstalling ati graphics, my normal xrandr command no longer worked.  That command is:

xrandr --output LVDS --mode 1920x1200 --pos 1680x0 --rotate normal --output CRT1 --mode 1680x1050 --pos 0x0 --rotate normal --output DFP2 --off --output DFP1 --off

And the error was “xrandr screen only supports 1920 x 1200″

The fix is really simple….

Run the command:

amdcccle

Configure the dual monitors the way you normally would, but make sure the virtual screen size / Desktop Area is set to:

3600x1200

Exit from X completely (including any display managers like kdm/gdm/etc) and it will then work when you log back in.  A quick tip, ctrl+alt+backspace usually will restart X.

Updated to include:

Don’t forget after installing a new kernel you have to do <as root>

ldconfig

prepare-kernel-sources

update-initramfs -k 3.2.6

./ati-driver-installer-11-11-x86.x86_64.run

ldconfig

/etc/init.d/vboxdrv setup

fix-splash

reboot

amdcccle

 

 

 

]]> http://www.edwiget.name/2012/03/backtrack-upgrade-to-linux-kernel-3-2-6-xrandr-screen-only-supports-1920x1200/feed/ 0 Backtrack: fixing fix-splash cpio initrd grew error http://www.edwiget.name/2012/02/backtrack-fixing-fix-splash-cpio-initrd-grew-error/?utm_source=rss&utm_medium=rss&utm_campaign=backtrack-fixing-fix-splash-cpio-initrd-grew-error http://www.edwiget.name/2012/02/backtrack-fixing-fix-splash-cpio-initrd-grew-error/#comments Mon, 20 Feb 2012 06:25:45 +0000 edwigetadmin http://www.edwiget.name/?p=472 [...]]]> If you run fix-splash on a backtrack installation and get:

$ sudo fix-splash
[*] Fixing Initrd
[*] Extracting Initrd
181100 blocks
cpio: File ./initrd grew, 46361600 new bytes not copied
181100 blocks
[*] Reboot and bask in the joys of BootSplash

The fix is really simple…..

sudo vi `which fix-splash`

and scroll to line 16 which has:

find ./ | cpio -H newc -o > initrd

and change that line to:

find ./ ! -name initrd | cpio -H newc -o > initrd

Save the file and run it again….poof….fixed.

The reason for the error was simple, we were creating a file in the directory we told the script to search….so it started at 0 bytes and increased in size during the search (find command)

]]> http://www.edwiget.name/2012/02/backtrack-fixing-fix-splash-cpio-initrd-grew-error/feed/ 0 Backtrack: John The Ripper Tips & Examples http://www.edwiget.name/2012/02/backtrack-john-the-ripper-tips-examples/?utm_source=rss&utm_medium=rss&utm_campaign=backtrack-john-the-ripper-tips-examples http://www.edwiget.name/2012/02/backtrack-john-the-ripper-tips-examples/#comments Sat, 11 Feb 2012 08:56:18 +0000 edwigetadmin http://www.edwiget.name/?p=457 [...]]]> You might also want to see my article Installing JTR On Backtrack for Multiprocessor Cores

I am too lazy to restore the old version of this file from my old website (it was hosted for years on mambo and I am just too lazy to do the db conversion).  Anyways, this website serves a couple of purposes, first is to keep some of my own notes handy and second to help others.  With that in mind, here is a collection of tips on using john the ripper:

Prepare Linux Shadow Passwords

umask 077
./unshadow /etc/passwd /etc/shadow > mypasswds

Default Modes - This will try “single crack” mode first, then use a wordlist with rules, and finally go for “incremental” mode.

./john mypasswds

Show Passwords

john --show mypasswds

Specify Modes

john --single mypasswds

Multiple Files Containing Hashes

john --single passwd1 passwd2 mypasswds
or use a wildcard 
john --single passwd* mypasswds

To use a wordlist

john --wordlist=/path/to/password.lst mypasswds

To mangle words from the wordlist, use the –rules option

john --wordlist=/path/to/password.lst --rules mypasswds

To run in the background and specify a session in case the session is interupted, use the session option

john --session=mysessionname --wordlist=/path/to/password.lst --rules mypasswds &

See the status of a session

john --status=mysessionname

To restore a session by name

john --restore=mysessionname

If cracking linux shadow files, to only crack passwords with valid shells

john --wordlist=/path/to/password.lst --rules --shells=sh,csh,tcsh,bash mypasswds

To exclude cracking specific users

john --wordlist=/path/to/passwords.lst --rules --users=-root,me mypasswds

Incremental Passwords – this takes forever but has a higher rate of obtaining passwords that are not common words

This will use the default “incremental” mode parameters, which are defined in the configuration file’s section named either [Incremental:All] (for most hash types) or [Incremental:LanMan] (for Windows LM hashes). By default, the [Incremental:All] parameters are set to use the full printable US-ASCII character set (95 characters) and to try all possible password lengths from 0 to 8. [Incremental:LanMan] is similar, except that it takes advantage of LM hashes being case-insensitive and of their halves limited to 7 characters each.  You should see Modes at the openwall web site.

john --incremental mypasswds

Speed

A few regular visitors of my website also on my twitter send me some messages and asked about speed.  I think that speed is important of course, and you likely won’t see the speed of gpu cracking with john, but you will see decent speeds.  What I decided to do was to take my own personal dictionary file and run it through both john and hashcat against a password list I have some personal information about.

Below I am using my own custom password list file.  It is very large and I often use it when I am not enabling rules option of john.  If I am enabling rules, I use a much smaller list that keeps the time more manageable.  Info about this list:

ewiget@TSPH4GD:/pentest/passwords/wordlists$ wc -l eds.passwd.list
310,261,848 eds.passwd.list

Here are the results….first with john and the rules option used, which is pretty much guaranteed to get the most passwords cracked….but I aborted this because I mostly wanted to show that it was going to take a very long time – from February 10 to April 8th, estimated:

ewiget@TSPH4GD:/pentest/passwords/john-1.7.9-jumbo-5/run$ ./john --wordlist=/pentest/passwords/wordlists/eds.passwd.list --rules --shells=sh,csh,tcsh,bash /home/ewiget/mypasswds
Loaded 20 password hashes with 20 different salts (FreeBSD MD5 [SSE2i 12x])
guesses: 0  time: 0:00:00:15 0.00%  c/s: 8489  trying: 0u75pi7 - 0u7c14m012
guesses: 0  time: 0:10:06:35 0.10% (ETA: Mon Apr  8 07:02:49 2013)  c/s: 9731  trying: 367799 - 3675906
guesses: 0  time: 0:10:07:09 0.10% (ETA: Mon Apr  8 16:29:29 2013)  c/s: 9731  trying: 3561040 - 355tied616
Session aborted

And then this one without the rules option enabled (I will update this with hashcat after this completes….and yes, that is in at least X more days because the value of X is unknown / estimated right now). This one was started on February 12 and says it will end on Feb 20, 8 days:
ewiget@TSPH4GD:/pentest/passwords/john-1.7.9-jumbo-5/run$ ./john --wordlist=/pentest/passwords/wordlists/eds.passwd.list --shells=sh,csh,tcsh,bash /home/ewiget/mypasswds
Loaded 20 password hashes with 20 different salts (FreeBSD MD5 [SSE2i 12x])
guesses: 0  time: 0:00:10:24 0.09% (ETA: Mon Feb 20 11:02:26 2012)  c/s: 9346  trying: Pan-scandinavia - Pantheian
guesses: 0  time: 0:01:10:32 0.63% (ETA: Mon Feb 20 05:02:39 2012)  c/s: 9317  trying: SPECIOUS - SPITBOL

]]> http://www.edwiget.name/2012/02/backtrack-john-the-ripper-tips-examples/feed/ 1 Backtrack: Multicore Processor Password Cracking With John The Ripper http://www.edwiget.name/2012/02/backtrack-multicore-processor-password-cracking-with-john-the-ripper/?utm_source=rss&utm_medium=rss&utm_campaign=backtrack-multicore-processor-password-cracking-with-john-the-ripper http://www.edwiget.name/2012/02/backtrack-multicore-processor-password-cracking-with-john-the-ripper/#comments Sat, 11 Feb 2012 07:43:23 +0000 edwigetadmin http://www.edwiget.name/?p=451 [...]]]> Lets face it, John the Ripper has been around a long time and the reason its been around a long time is because its damn good at cracking passwords.  Yea, hashcat and oclhashcat are great for gpu cracking, but it doesn’t support as many algorithms as JTR.  So, imagine my surprise when I fire up John The Ripper on backtrack 5 64 bit and find out it is using a single CPU.  That is letting a potential 75% of my system sit there wanting to do something.  Luckily the fix is easier than fixing a sandwich.

If you already have jtr installed, you may want to see my john tips article.

First, lets grab the jumbo sourcecode….

cd /pentest/passwords ; wget http://www.openwall.com/john/g/john-1.7.9-jumbo-5.tar.gz

Then lets extract it….

tar xzfvp john-1.7.9-jumbo-5.tar.gz

Then switch to the src directory…..

cd john-1.7.9-jumbo-5/src

Next, open the Makefile in whatever text editor you use, I use vi…..and uncomment the two lines listed below under # gcc with OpenMP….

# gcc with OpenMP
OMPFLAGS = -fopenmp
OMPFLAGS = -fopenmp -msse2

If you are not building this for 64 bit linux with sse optimizations, then type make without any options to get the list of targets, otherwise, run the command below…

make linux-x86-64

When that completes, run the test from the ../run directory….

cd ../run
./john --test

It will spit out some test results…..run with however many cores you have on your system by default….(4xOMP) signifies 4 cores using OMP… (test results below)

So, now we have it using up all our cores, lets assume you only want it to use 2 cores out of a 4 core cpu…..use this string and replace the 2 with the number of cores to enable:

OMP_NUM_THREADS=2 ./john --test
Benchmarking: Traditional DES [128/128 BS SSE2-16]... (4xOMP) DONE
Many salts:	8454K c/s real, 2173K c/s virtual
Only one salt:	7105K c/s real, 1840K c/s virtual
 
Benchmarking: BSDI DES (x725) [128/128 BS SSE2-16]... (4xOMP) DONE
Many salts:	290978 c/s real, 74590 c/s virtual
Only one salt:	273408 c/s real, 70104 c/s virtual
 
Benchmarking: FreeBSD MD5 [SSE2i 12x]... (4xOMP) DONE
Raw:	10455 c/s real, 2673 c/s virtual
 
Benchmarking: OpenBSD Blowfish (x32) [32/64 X2]... (4xOMP) DONE
Raw:	2685 c/s real, 690 c/s virtual
 
Benchmarking: Kerberos AFS DES [48/64 4K]... DONE
Short:	379904 c/s real, 351762 c/s virtual
Long:	1065K c/s real, 1065K c/s virtual
 
Benchmarking: LM DES [128/128 BS SSE2-16]... (4xOMP) DONE
Raw:	41123K c/s real, 10571K c/s virtual
 
Benchmarking: dynamic_0: md5($p)  (raw-md5)  [SSE2i 10x4x3]... DONE
Raw:	2712K c/s real, 2466K c/s virtual
 
Benchmarking: dynamic_1: md5($p.$s)  (joomla)  [SSE2i 10x4x3]... DONE
Many salts:	2552K c/s real, 2552K c/s virtual
Only one salt:	2364K c/s real, 2388K c/s virtual
 
Benchmarking: dynamic_2: md5(md5($p))  (e107)  [SSE2i 10x4x3]... DONE
Raw:	1341K c/s real, 1354K c/s virtual
 
Benchmarking: dynamic_3: md5(md5(md5($p)))  [SSE2i 10x4x3]... DONE
Raw:	891360 c/s real, 900363 c/s virtual
 
Benchmarking: dynamic_4: md5($s.$p)  (OSC)  [SSE2i 10x4x3]... DONE
Many salts:	2545K c/s real, 2571K c/s virtual
Only one salt:	2365K c/s real, 2365K c/s virtual
 
Benchmarking: dynamic_5: md5($s.$p.$s)  [SSE2i 10x4x3]... DONE
Many salts:	2441K c/s real, 2466K c/s virtual
Only one salt:	2253K c/s real, 2253K c/s virtual
 
Benchmarking: dynamic_6: md5(md5($p).$s)  [SSE2i 10x4x3]... DONE
Many salts:	2698K c/s real, 2726K c/s virtual
Only one salt:	1257K c/s real, 1257K c/s virtual
 
Benchmarking: dynamic_8: md5(md5($s).$p)  [SSE2i 10x4x3]... DONE
Many salts:	2566K c/s real, 2592K c/s virtual
Only one salt:	2380K c/s real, 2380K c/s virtual
 
Benchmarking: dynamic_9: md5($s.md5($p))  [SSE2i 10x4x3]... DONE
Many salts:	2523K c/s real, 2523K c/s virtual
Only one salt:	1213K c/s real, 1213K c/s virtual
 
Benchmarking: dynamic_10: md5($s.md5($s.$p))  [SSE2i 10x4x3]... DONE
Many salts:	1274K c/s real, 1274K c/s virtual
Only one salt:	1225K c/s real, 1225K c/s virtual
 
Benchmarking: dynamic_11: md5($s.md5($p.$s))  [SSE2i 10x4x3]... DONE
Many salts:	1281K c/s real, 1281K c/s virtual
Only one salt:	1231K c/s real, 1231K c/s virtual
 
Benchmarking: dynamic_12: md5(md5($s).md5($p))  (IPB)  [SSE2i 10x4x3]... DONE
Many salts:	3159K c/s real, 3159K c/s virtual
Only one salt:	1299K c/s real, 1299K c/s virtual
 
Benchmarking: dynamic_13: md5(md5($p).md5($s))  [SSE2i 10x4x3]... DONE
Many salts:	3119K c/s real, 3119K c/s virtual
Only one salt:	1298K c/s real, 1311K c/s virtual
 
Benchmarking: dynamic_14: md5($s.md5($p).$s)  [SSE2i 10x4x3]... DONE
Many salts:	2433K c/s real, 2433K c/s virtual
Only one salt:	1217K c/s real, 1229K c/s virtual
 
Benchmarking: dynamic_15: md5($u.md5($p).$s)  [64x2 (MD5_Body)]... DONE
Many salts:	6595K c/s real, 6595K c/s virtual
Only one salt:	3331K c/s real, 3331K c/s virtual
 
Benchmarking: dynamic_16: md5(md5(md5($p).$s).$s2)  [64x2 (MD5_Body)]... DONE
Many salts:	3876K c/s real, 3876K c/s virtual
Only one salt:	2207K c/s real, 2207K c/s virtual
 
Benchmarking: dynamic_17: phpass ($P$ or $H$)  [SSE2i 2x4x3]... DONE
Raw:	1378 c/s real, 1378 c/s virtual
 
Benchmarking: dynamic_18: md5($s.Y.$p.0xF7.$s) (Post.Office MD5)  [64x2 (MD5_Body)]... DONE
Many salts:	3234K c/s real, 3234K c/s virtual
Only one salt:	2901K c/s real, 2901K c/s virtual
 
Benchmarking: dynamic_19: Cisco PIX (MD5) [SSE2i 10x4x3]... DONE
Raw:	2469K c/s real, 2469K c/s virtual
 
Benchmarking: dynamic_20: Cisco PIX (MD5 salted) [SSE2i 10x4x3]... DONE
Many salts:	2549K c/s real, 2549K c/s virtual
Only one salt:	2356K c/s real, 2356K c/s virtual
 
Benchmarking: dynamic_21: HTTP Digest Access Auth [SSE2i 10x4x3]... DONE
Many salts:	1077K c/s real, 1077K c/s virtual
Only one salt:	1052K c/s real, 1052K c/s virtual
 
Benchmarking: dynamic_22: md5(sha1($p)) [SSE2i 10x4x3]... DONE
Raw:	1618K c/s real, 1618K c/s virtual
 
Benchmarking: dynamic_23: sha1(md5($p)) [SSE2i 10x4x3]... DONE
Raw:	1605K c/s real, 1605K c/s virtual
 
Benchmarking: dynamic_24: sha1($p.$s) [SSE2i 10x4x3]... DONE
Many salts:	4817K c/s real, 4817K c/s virtual
Only one salt:	4035K c/s real, 4035K c/s virtual
 
Benchmarking: dynamic_25: sha1($s.$p) [SSE2i 10x4x3]... DONE
Many salts:	4616K c/s real, 4616K c/s virtual
Only one salt:	4092K c/s real, 4092K c/s virtual
 
Benchmarking: dynamic_26: sha1($p) raw-sha1 [4x1]... DONE
Raw:	5605K c/s real, 5605K c/s virtual
 
Benchmarking: dynamic_27: FreeBSD MD5 [SSE2i 4x3]... DONE
Raw:	2724 c/s real, 2724 c/s virtual
 
Benchmarking: dynamic_28: Apache MD5 [SSE2i 4x3]... DONE
Raw:	2736 c/s real, 2736 c/s virtual
 
Benchmarking: dynamic_29: md5(unicode($p)) [SSE2i 10x4x3]... DONE
Raw:	2479K c/s real, 2504K c/s virtual
 
Benchmarking: dynamic_1001 md5(md5(md5(md5($p)))) [SSE2i 10x4x3]... DONE
Raw:	666480 c/s real, 673212 c/s virtual
 
Benchmarking: dynamic_1002 md5(md5(md5(md5(md5($p))))) [SSE2i 10x4x3]... DONE
Raw:	532440 c/s real, 532440 c/s virtual
 
Benchmarking: dynamic_1003 md5(md5($p).md5($p)) [64x2 (MD5_Body)]... DONE
Raw:	1968K c/s real, 1988K c/s virtual
 
Benchmarking: dynamic_1004 md5(md5(md5(md5(md5(md5($p)))))) [SSE2i 10x4x3]... DONE
Raw:	443160 c/s real, 443160 c/s virtual
 
Benchmarking: dynamic_1005 md5(md5(md5(md5(md5(md5(md5($p))))))) [SSE2i 10x4x3]... DONE
Raw:	379800 c/s real, 379800 c/s virtual
 
Benchmarking: dynamic_1006 md5(md5(md5(md5(md5(md5(md5(md5($p)))))))) [SSE2i 10x4x3]... DONE
Raw:	332400 c/s real, 332400 c/s virtual
 
Benchmarking: dynamic_1008 md5($p.$s) [RADIUS User-Password] [SSE2i 10x4x3]... DONE
Many salts:	2550K c/s real, 2575K c/s virtual
Only one salt:	2361K c/s real, 2361K c/s virtual
 
Benchmarking: dynamic_1009 md5($s.$p) [RADIUS Responses] [SSE2i 10x4x3]... DONE
Many salts:	2621K c/s real, 2647K c/s virtual
Only one salt:	2434K c/s real, 2410K c/s virtual
 
Benchmarking: Eggdrop [blowfish]... DONE
Raw:	24739 c/s real, 24988 c/s virtual
 
Benchmarking: CRC-32 [32/64]... (4xOMP) DONE
Many salts:	145850K c/s real, 39525K c/s virtual
Only one salt:	20807K c/s real, 6382K c/s virtual
 
Benchmarking: DIGEST-MD5 [DIGEST-MD5 authentication]... DONE
Many salts:	1308K c/s real, 1200K c/s virtual
Only one salt:	1308K c/s real, 1308K c/s virtual
 
Benchmarking: More Secure Internet Password [RSA MD defined by BSAFE 1.x - Lotus v6]... DONE
Many salts:	79975 c/s real, 80782 c/s virtual
Only one salt:	47417 c/s real, 47417 c/s virtual
 
Benchmarking: EPiServer SID Hashes [SHA-1]... DONE
Many salts:	4366K c/s real, 4410K c/s virtual
Only one salt:	4120K c/s real, 4120K c/s virtual
 
Benchmarking: HTTP Digest access authentication [HDAA-MD5]... DONE
Many salts:	1419K c/s real, 1433K c/s virtual
Only one salt:	1381K c/s real, 1381K c/s virtual
 
Benchmarking: HMAC MD5 [SSE2i 12x]... DONE
Raw:	706392 c/s real, 706392 c/s virtual
 
Benchmarking: IPB2 MD5 [Invision Power Board 2.x salted MD5]... DONE
Many salts:	2912K c/s real, 2912K c/s virtual
Only one salt:	1801K c/s real, 1801K c/s virtual
 
Benchmarking: Kerberos v4 TGT [krb4 DES]... DONE
Raw:	2451K c/s real, 2451K c/s virtual
 
Benchmarking: Kerberos v5 TGT [krb5 3DES (des3-cbc-sha1)]... DONE
Raw:	40663 c/s real, 40663 c/s virtual
 
Benchmarking: Lotus5 [Lotus v5 Proprietary]... (4xOMP) DONE
Raw:	949248 c/s real, 254490 c/s virtual
 
Benchmarking: Generic salted MD4 [32/64]... DONE
Many salts:	6823K c/s real, 6203K c/s virtual
Only one salt:	6022K c/s real, 6022K c/s virtual
 
Benchmarking: MediaWiki -- md5($s.'-'.md5($p)) [SSE2i 10x4x3]... DONE
Many salts:	2559K c/s real, 2585K c/s virtual
Only one salt:	1220K c/s real, 1220K c/s virtual
 
Benchmarking: M$ Cache Hash [Generic 1x]... (4xOMP) DONE
Many salts:	34383K c/s real, 9024K c/s virtual
Only one salt:	12105K c/s real, 3185K c/s virtual
 
Benchmarking: M$ Cache Hash 2 (DCC2) [SSE2i 4x]... (4xOMP) DONE
Raw:	807 c/s real, 225 c/s virtual
 
Benchmarking: MSCHAPv2 C/R MD4 DES [mschapv2]... (4xOMP) DONE
Many salts:	6938K c/s real, 1885K c/s virtual
Only one salt:	4379K c/s real, 1170K c/s virtual
 
Benchmarking: MS Kerberos 5 AS-REQ Pre-Auth [mskrb5]... (4xOMP) DONE
Many salts:	2100K c/s real, 560059 c/s virtual
Only one salt:	1205K c/s real, 319694 c/s virtual
 
Benchmarking: MS-SQL05 [SSE2i 4x]... DONE
Many salts:	6423K c/s real, 5893K c/s virtual
Only one salt:	5777K c/s real, 5777K c/s virtual
 
Benchmarking: MS-SQL [SSE2i 4x]... DONE
Many salts:	6424K c/s real, 6424K c/s virtual
Only one salt:	4752K c/s real, 4752K c/s virtual
 
Benchmarking: MYSQL_fast [mysql-fast]... DONE
Raw:	19611K c/s real, 19611K c/s virtual
 
Benchmarking: MYSQL [mysql]... DONE
Raw:	2730K c/s real, 2730K c/s virtual
 
Benchmarking: MySQL 4.1 double-SHA-1 [SSE2i 4x]... DONE
Raw:	2913K c/s real, 2943K c/s virtual
 
Benchmarking: LM C/R DES [netlm]... (4xOMP) DONE
Many salts:	8024K c/s real, 2100K c/s virtual
Only one salt:	884736 c/s real, 244402 c/s virtual
 
Benchmarking: LMv2 C/R MD4 HMAC-MD5 [netlmv2]... (4xOMP) DONE
Many salts:	2476K c/s real, 660275 c/s virtual
Only one salt:	1778K c/s real, 475585 c/s virtual
 
Benchmarking: NTLMv1 C/R MD4 DES [ESS MD5] [netntlm]... (4xOMP) DONE
Many salts:	7295K c/s real, 1954K c/s virtual
Only one salt:	3723K c/s real, 1031K c/s virtual
 
Benchmarking: NTLMv2 C/R MD4 HMAC-MD5 [netntlmv2]... (4xOMP) DONE
Many salts:	2457K c/s real, 640000 c/s virtual
Only one salt:	1687K c/s real, 450013 c/s virtual
 
Benchmarking: HalfLM C/R DES [nethalflm]... (4xOMP) DONE
Many salts:	7581K c/s real, 2005K c/s virtual
Only one salt:	1327K c/s real, 367618 c/s virtual
 
Benchmarking: Netscreen MD5 [NS MD5]... DONE
Raw:	4477K c/s real, 4107K c/s virtual
 
Benchmarking: Netscape LDAP SHA [SSE2i 4x]... DONE
Raw:	5979K c/s real, 5979K c/s virtual
 
Benchmarking: NT v2 [SSE2i 12x]... DONE
Raw:	4112K c/s real, 4112K c/s virtual
 
Benchmarking: NT MD4 [128/128 X2 SSE2-16]... DONE
Raw:	21758K c/s real, 21758K c/s virtual
 
Benchmarking: Oracle 11g [oracle11]... DONE
Many salts:	4237K c/s real, 4237K c/s virtual
Only one salt:	3689K c/s real, 3689K c/s virtual
 
Benchmarking: Oracle [oracle]... DONE
Raw:	707729 c/s real, 707729 c/s virtual
 
Benchmarking: PHPass MD5 [SSE2i 2x4x3]... DONE
Raw:	1392 c/s real, 1392 c/s virtual
 
Benchmarking: PHPS -- md5(md5($pass).$salt) [SSE2i 10x4x3]... DONE
Many salts:	2718K c/s real, 2718K c/s virtual
Only one salt:	1256K c/s real, 1256K c/s virtual
 
Benchmarking: PIX MD5 [SSE2i 10x4x3]... DONE
Many salts:	2487K c/s real, 2487K c/s virtual
Only one salt:	2490K c/s real, 2516K c/s virtual
 
Benchmarking: pkzip [N/A]... (4xOMP) DONE
Many salts:	24015K c/s real, 6286K c/s virtual
Only one salt:	11242K c/s real, 2982K c/s virtual
 
Benchmarking: Post.Office MD5 [STD]... DONE
Many salts:	3167K c/s real, 2932K c/s virtual
Only one salt:	3012K c/s real, 3012K c/s virtual
 
Benchmarking: Raw MD4 [SSE2i 12x]... DONE
Raw:	4103K c/s real, 4144K c/s virtual
 
Benchmarking: Raw MD5 [SSE2i 12x]... DONE
Raw:	2715K c/s real, 2743K c/s virtual
 
Benchmarking: Raw MD5 [SSE2i 10x4x3]... DONE
Raw:	2686K c/s real, 2686K c/s virtual
 
Benchmarking: md5(unicode($p)) [SSE2i 10x4x3]... DONE
Raw:	2485K c/s real, 2485K c/s virtual
 
Benchmarking: Raw SHA-1 [SSE2i 4x]... DONE
Raw:	5431K c/s real, 5431K c/s virtual
 
Benchmarking: Raw SHA [32/64]... DONE
Raw:	3634K c/s real, 3634K c/s virtual
 
Benchmarking: Salted SHA-1 [SSE2i 4x]... DONE
Many salts:	6057K c/s real, 6057K c/s virtual
Only one salt:	5394K c/s real, 5448K c/s virtual
 
Benchmarking: SAP BCODE [sapb]... (4xOMP) DONE
Many salts:	6232K c/s real, 1657K c/s virtual
Only one salt:	5225K c/s real, 1374K c/s virtual
 
Benchmarking: SAP CODVN G (PASSCODE) [sapg]... (4xOMP) DONE
Many salts:	4560K c/s real, 1206K c/s virtual
Only one salt:	2543K c/s real, 731897 c/s virtual
 
Benchmarking: Generic salted SHA-1 [32/64]... DONE
Many salts:	4122K c/s real, 3782K c/s virtual
Only one salt:	3813K c/s real, 3813K c/s virtual
 
Benchmarking: Mac OS X 10.4 - 10.6 salted SHA-1 [32/64]... (4xOMP) DONE
Many salts:	14298K c/s real, 3713K c/s virtual
Only one salt:	9988K c/s real, 2663K c/s virtual
 
Benchmarking: Raw SHA-224 [32/64]... DONE
Raw:	2098K c/s real, 1907K c/s virtual
 
Benchmarking: Raw SHA-256 [32/64]... DONE
Raw:	2092K c/s real, 2113K c/s virtual
 
Benchmarking: Raw SHA-384 [64/64]... DONE
Raw:	1661K c/s real, 1678K c/s virtual
 
Benchmarking: Raw SHA-512 [64/64]... DONE
Raw:	1644K c/s real, 1644K c/s virtual
 
Benchmarking: Mac OS X 10.7+ salted SHA-512 [64/64]... (4xOMP) DONE
Many salts:	3587K c/s real, 1038K c/s virtual
Only one salt:	547485 c/s real, 195392 c/s virtual
 
Benchmarking: hmailserver [32/64]... DONE
Many salts:	2155K c/s real, 1977K c/s virtual
Only one salt:	2046K c/s real, 2046K c/s virtual
 
Benchmarking: sybasease [32/64]... (4xOMP) DONE
Many salts:	854976 c/s real, 227993 c/s virtual
Only one salt:	788544 c/s real, 209719 c/s virtual
 
Benchmarking: generic crypt(3) DES [?/64]... (4xOMP) DONE
Many salts:	664416 c/s real, 177177 c/s virtual
Only one salt:	601536 c/s real, 162577 c/s virtual
 
Benchmarking: Tripcode DES [48/64 4K]... DONE
Raw:	280192 c/s real, 259437 c/s virtual
 
Benchmarking: ssh [32/64]... DONE
Raw:	182976 c/s real, 182976 c/s virtual
 
Benchmarking: pdf [32/64]... DONE
Many salts:	16939 c/s real, 16939 c/s virtual
Only one salt:	34731 c/s real, 34731 c/s virtual
 
Benchmarking: rar [32/64]... DONE
Raw:	33.6 c/s real, 33.6 c/s virtual
 
Benchmarking: zip [32/64]... (4xOMP) DONE
Raw:	1882 c/s real, 528 c/s virtual
 
Benchmarking: dummy [N/A]... DONE
Raw:	79548K c/s real, 72317K c/s virtual
]]> http://www.edwiget.name/2012/02/backtrack-multicore-processor-password-cracking-with-john-the-ripper/feed/ 1 Arch Linux: Generating Entropy http://www.edwiget.name/2012/02/arch-linux-generating-entropy/?utm_source=rss&utm_medium=rss&utm_campaign=arch-linux-generating-entropy http://www.edwiget.name/2012/02/arch-linux-generating-entropy/#comments Sun, 05 Feb 2012 19:40:00 +0000 edwigetadmin http://www.edwiget.name/?p=448 [...]]]> When you upgrade pacman, you will get a message that says “run pacman –init” and when you do from a console (like on a remote server), you will then be presented with the following message:

# pacman-key --init
gpg: Generating pacman keychain master key...
 
Not enough random bytes available.  Please do some other work to give
the OS a chance to collect more entropy! (Need 282 more bytes)

There are numerous ways to generate entropy in Linux.  Here are the ways I usually try in order because sometimes one will work right away and other times it won’t:

  1. Log in to the server in another console and leave the message on your screen.
  2. If you have the mlocate package installed, run the updatedb command…other wise go to step 3 (or install using ‘pacman -S mlocate’
  3. ls -R /
  4. find / -type f -exec ls -lta “{}” \;

Usually one of those three commands will get it done.

]]> http://www.edwiget.name/2012/02/arch-linux-generating-entropy/feed/ 0 Corel Purchases Bibble Pro (linux, windows, mac RAW Editor / DAM software) http://www.edwiget.name/2012/02/corel-purchases-bibble-pro-linux-windows-mac-raw-editor-dam-software/?utm_source=rss&utm_medium=rss&utm_campaign=corel-purchases-bibble-pro-linux-windows-mac-raw-editor-dam-software http://www.edwiget.name/2012/02/corel-purchases-bibble-pro-linux-windows-mac-raw-editor-dam-software/#comments Sun, 05 Feb 2012 19:30:43 +0000 edwigetadmin http://www.edwiget.name/?p=443 [...]]]> I had reviewed bibble labs bibble pro software several times as a solution to Digikam, Lightroom, etc in Linux.  Most recently I tried the bibble labs pro v5 series in October.  I was ready to shell out the $299 but for the life of me couldn’t figure out how to order the software from their website (and I am an IT person).  Anyways, Corel software purchased Bibble Pro in January 2012 and released it under the new name Aftershot Pro.  They also reduced the price down to $99 (or $79 if you are upgrading or have a license version of lightroom).

I immediately bought a license….and you know, if Adobe would release Photoshop for Linux, I would do the same thing.

]]> http://www.edwiget.name/2012/02/corel-purchases-bibble-pro-linux-windows-mac-raw-editor-dam-software/feed/ 0