120 lines
4.7 KiB
Plaintext
120 lines
4.7 KiB
Plaintext
|
Cracker Jack FAQ Written by kM
|
|||
|
|
Corrections and Password files can
|
|||
|
|
be sent to kM@hackersclub.com for cracking.
|
|||
|
|
Questions and Comments are welcome too.
|
|||
|
|
=======================================
|
|||
|
|
|
|||
|
|
The number one problem in today's internet server is a bad security setup.
|
|||
|
|
If someone doesn't protect or shawdow that passwd file in the /etc directory
|
|||
|
|
someone is going to take it and have total control of your server. By
|
|||
|
|
default Unix drops the passwords (encrypted) into a passwd if the /etc. Its
|
|||
|
|
the admins job to make sure that no one can download this and run it against
|
|||
|
|
a brute force attacker. IE: Cracker Jack.
|
|||
|
|
|
|||
|
|
I use Cracker Jack because so far it seems to work fine for me. It does work
|
|||
|
|
and I will prove it to you. Ok enuff of the bullshit..now if you can
|
|||
|
|
get or trade for a passwd file. I can show you in the faq what you need
|
|||
|
|
to do in order to crack the fucker.
|
|||
|
|
|
|||
|
|
Step 1: Cracker Jack is picky when it comes to memory...you better
|
|||
|
|
have no flaws in it. Therefore when you boot your computer (win95 /dos)
|
|||
|
|
bypass all configurations and drop to dos. In DOS 6.22 its f5 when it
|
|||
|
|
says "Starting MS-DOS" Win95 you can do Shift-F8 and then F5 till you get
|
|||
|
|
to a dos prompt. Cracker Jack has been tested by me in both enviorments
|
|||
|
|
and works correctly only under a clean boot.
|
|||
|
|
---------------------------------------------------------------------------
|
|||
|
|
Step 2: Go into the Cracker Jack Directory. Cracker Jack uses a word list
|
|||
|
|
in which it compares the encrypted password to the wordlist in which
|
|||
|
|
you specify. You can make one up if you like or use the default one
|
|||
|
|
that comes with Cracker Jack. Puffs.dic Now...depending on where the
|
|||
|
|
passwd file comes from (country) slap a dictionary file from that country
|
|||
|
|
against it. (Example: Mexican Passwd file...hit it with a Spanish
|
|||
|
|
Dictionary). Ok now that we have this clear lets start...
|
|||
|
|
--------------------------------------------------------------------------
|
|||
|
|
Step 3: Run jack.exe.. You should get this...if you get something else
|
|||
|
|
try booting your PC clean. If not find another copy..might be
|
|||
|
|
corrupted.
|
|||
|
|
|
|||
|
|
Cracker Jack version 1.4 for OS/2 and DOS (386)
|
|||
|
|
Copyright (C) 1993, The Jackal, Denmark
|
|||
|
|
|
|||
|
|
PWfile(s) :
|
|||
|
|
Wordfile :
|
|||
|
|
|
|||
|
|
Where it asks you for the pwfile... put the passwd lists name.
|
|||
|
|
Where it asks for the Wordfile put the dictionary name. Now it will
|
|||
|
|
start cracking the bitch. You will here beeps and see screen output
|
|||
|
|
when it cracks an account. It will display the password it cracked
|
|||
|
|
and the user id next to it.
|
|||
|
|
|
|||
|
|
Here is an example:
|
|||
|
|
|
|||
|
|
Cracker Jack version 1.4 for OS/2 and DOS (386)
|
|||
|
|
Copyright (C) 1993, The Jackal, Denmark
|
|||
|
|
|
|||
|
|
PWfile(s) : gate.pwd
|
|||
|
|
Wordfile : puffs.dic
|
|||
|
|
|
|||
|
|
Initializing session data...
|
|||
|
|
Loaded 886 total accounts with 768 different salts.
|
|||
|
|
|
|||
|
|
Cracking... (Hit any key for status, Ctrl-C to abort)
|
|||
|
|
-------------------------------------------------------------------------
|
|||
|
|
After it cracks one you should see this display..
|
|||
|
|
|
|||
|
|
Cracker Jack version 1.4 for OS/2 and DOS (386)
|
|||
|
|
Copyright (C) 1993, The Jackal, Denmark
|
|||
|
|
|
|||
|
|
PWfile(s) : gate.pwd
|
|||
|
|
Wordfile : puffs.dic
|
|||
|
|
|
|||
|
|
Initializing session data...
|
|||
|
|
Loaded 886 total accounts with 768 different salts.
|
|||
|
|
|
|||
|
|
|
|||
|
|
Cracking... (Hit any key for status, Ctrl-C to abort)
|
|||
|
|
|
|||
|
|
marika (gkantor)
|
|||
|
|
|
|||
|
|
^- Password ^- UserId
|
|||
|
|
|
|||
|
|
You won't have to write this down..with cracker jack it will store
|
|||
|
|
the cracked ids into a file called jack.pot. You can use a program
|
|||
|
|
that comes with Cracker Jack called jackpot.exe to write a text file
|
|||
|
|
for you with the information and everything. This is what you do after
|
|||
|
|
you are finished cracking the passwd file.
|
|||
|
|
|
|||
|
|
jackpot gate.pwd > cracked.txt
|
|||
|
|
|
|||
|
|
jackpot reads the passwd file and compares it to Jack.pot and the > means
|
|||
|
|
pipe it to a text file cracked.txt is a name I made up. Name it anything
|
|||
|
|
you want. After you do this your cracked.txt should look like this...
|
|||
|
|
|
|||
|
|
PWfile(s) : gate.pwd
|
|||
|
|
|
|||
|
|
gkantor:marika:3009:301:George Kantor:/u3/gkantor:/bin/ksh
|
|||
|
|
|
|||
|
|
1 account cracked, 885 left.
|
|||
|
|
|
|||
|
|
---------------------------------------------------------------------
|
|||
|
|
*** REMEMBER ***
|
|||
|
|
You can use any wordfile or dictionary file you want...just specify
|
|||
|
|
it on the wordfile line.
|
|||
|
|
|
|||
|
|
** NOTE **
|
|||
|
|
Use this as a learning tool...I won't be held liable for your lameness.
|
|||
|
|
|
|||
|
|
Now that I have given you newbies all you need to know about using
|
|||
|
|
cracker jack please give me my due credit for sitting down and writing
|
|||
|
|
this bad little puppy out for you.
|
|||
|
|
|
|||
|
|
I have cracked many password files and the only ones that are hard to
|
|||
|
|
crack are the shadow'd passwd files. They too can be cracked but they
|
|||
|
|
take a little more time..and thats another faq intirely. So if your
|
|||
|
|
a systems adminstrator please protect that dear passwd file. :)
|
|||
|
|
|
|||
|
|
|
|||
|
|
- kM -
|
|||
|
|
Webmaster of HackerZ Hideout & Hackersclub
|
|||
|
|
http://www.hackersclub.com/km
|