Qbasicnews.com

Full Version: How to crack a password??
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Pages: 1 2 3
I have to access my DSL router (local ip = 192.168.1.1).
When I try to access this ip, I have to type in a username and a password.
But silly me forgot the password. Now I want to know if there are programms to crack a password???

Can you please help me!!
It all depends on how its possible to access username/password attempts. There are a few ulities that can do bruteforce attempts to gain the password but they can take their time.

It would probably be easier if you have access to the machine to reset it yourself.
I can reset the router by myself on the hardware site.
But I first wanted to know if there's a GOOD way to get to know the password
If the password can only be inputted via the program's prompt, you need to make/find a program that will "stuff" the keyboard with attempts. I've not used one myself, so can't help you there but I wouldn't imagine it would be too difficult to write, but it depends on how the router's security is set up. It may have good coutner measures to stop that, but may probably not.
This might help. Maybe. I dont know much about these things.
http://www.hoobie.net/brutus
If the password is sofware dependent, reinstall the program.

If it is hardware dependant, call the support for it.



Let's say you can test 1 password each sec.

If the password consists of a-z

Then there are passwordlen^26 possible kombinations

If the password is 8 chars long, then there are:
26*26*26*26*26*26*26*26=302231454903657293676544 possible combinations.

Which menas that it would take 302231454903657293676544seconds to check every possible combination, this equals: about 9'583'696'565'945'500 YEARS (which is like, uhm, too long to wait for.. or longer than the universe has existed)

and if the password consist of a-z, A-Z and 0-9, then there are:
passwordlen^(26+26+10) possible combinations.

You do the math.

Cracking a password is not something you can efficiently do with a personal computer. Unless:

The password is a word, like "airplane"

Brute force works by loading a wordlist and testing each entry in the word list as a password. This speeds up the process somewhat.

But what if my pass is "My1337AirPlanE" it is easy to remember, or if my password is "1DFgk5Z", almost impossible to break using brute force or wordlist breeaking.
Yes...much better to try to use an exploit. There's always one. There never isn't.
A determined person will always been able to overcome a password. But it all depends on what they're attempting and why. Brute force by definition is a slow process. But for a determined password cracker, a simple utility would be able to crack any length password in a short space of time.
Quote:But what if my pass is "My1337AirPlanE" it is easy to remember, or if my password is "1DFgk5Z", almost impossible to break using brute force or wordlist breeaking
Its not impossibel to break, brute force would do the latter faster actually, since all it does is go through each ascii code at a time, and then add one.

Quote:But for a determined password cracker, a simple utility would be able to crack any length password in a short space of time.

Not really, not on my computer. as zire stated, it would take a couple of years to go through all the combinations, of a password. My computer can do 20,000 zip checks per second, so doing the math, it could take a while.

It took me 10(maybe up to 30) minutes to go through all the combinations of a 4 letter word on a zip file. Im not sure im ready for 5 yet Smile
Quote:Its not impossibel to break, brute force would do the latter faster actually, since all it does is go through each ascii code at a time, and then add one.

1DFgk5Z

First letter starting with ascii 49

First, how do you know it starts with ascii 49?.. to be really sure you have to start at 32 (space) as we can easily conclude that noone uses chars below 32 (special chars such as bell and carriage return) or any chars above 122 (small z)

Now, to test every possible combination we have to go through:
255-(32+122)=101
101^7=107213535210701
so: 107213535210701 possible combinations if I know the password lenght, and most times you don't, so you have to start at a 1len password and work your way up.

Here's an example:
My password is: 01001011
The vilain (me) knows the lenght of the password and ascii range (0-1)

program start:
10000000
01000000
11000000
00100000
10100000
01100000
11100000
00010000
10010000
01010000
11010000
00110000
10110000
01110000
11110000
00001000
10001000
01001000
11001000
00101000
10101000
01101000
11101000
00011000
10011000
01011000
11011000
00111000
10111000
01111000
11111000
00000100
10000100
01000100
11000100
00100100
10100100
01100100
11100100
00010100
10010100
01010100
11010100
00110100
10110100
01110100
11110100
00001100
10001100
01001100
11001100
00101100
10101100
01101100
11101100
00011100
10011100
01011100
11011100
00111100
10111100
01111100
11111100
00000010
10000010
01000010
11000010
00100010
10100010
01100010
11100010
00010010
10010010
01010010
11010010
00110010
10110010
01110010
11110010
00001010
10001010
01001010
11001010
00101010
10101010
01101010
11101010
00011010
10011010
01011010
11011010
00111010
10111010
01111010
11111010
00000110
10000110
01000110
11000110
00100110
10100110
01100110
11100110
00010110
10010110
01010110
11010110
00110110
10110110
01110110
11110110
00001110
10001110
01001110
11001110
00101110
10101110
01101110
11101110
00011110
10011110
01011110
11011110
00111110
10111110
01111110
11111110
00000001
10000001
01000001
11000001
00100001
10100001
01100001
11100001
00010001
10010001
01010001
11010001
00110001
10110001
01110001
11110001
00001001
10001001
01001001
11001001
00101001
10101001
01101001
11101001
00011001
10011001
01011001
11011001
00111001
10111001
01111001
11111001
00000101
10000101
01000101
11000101
00100101
10100101
01100101
11100101
00010101
10010101
01010101
11010101
00110101
10110101
01110101
11110101
00001101
10001101
01001101
11001101
00101101
10101101
01101101
11101101
00011101
10011101
01011101
11011101
00111101
10111101
01111101
11111101
00000011
10000011
01000011
11000011
00100011
10100011
01100011
11100011
00010011
10010011
01010011
11010011
00110011
10110011
01110011
11110011
00001011
10001011
01001011
Program end: Password found
Combinations tested: 210
Combinations per second 10
Total time: 21sec

Please note that for the example i just showed there are 2^8=256 possible combinations.

Also most login/password protected software/hardware has a masimum try and a timelimit betveen each try. For example in Novix[Xivon] (a fake OS i'm writing) there is a cooldown of 1 sec betveen password attempts, and if the wrong password is given, system locks for 10 seconds.

Sry about the long post.
Pages: 1 2 3