MD5 Hash Cracking With Perl.

Hey Guys Its me Aitezaz ToDay i will sharing a TUT with About Hash Cracking

root@bt:~# Hi guys once again a simple but useful tutorial how to crack md5 hashes. If you have an password in md5 hash and you need password in plain text for this there is lot of tool'
> and online websites too but they wont crack all md5 hash if your hash exist in thier database they will give u plain text password but if not than u have to use some tool like 
> here we are using a perl script to crack an hash so i had encrypted an text "r2/." into a md5 hash which is "5d28a1f53e24a8b0a85d0a53348d49ad" so here we will try to decrypt it 

> again with perl in a plain text so first of all here we already know the leth of text is 4 and it is included with specail characters like ". /" etc so our job will be easy 
> but if we dont know the length and what kind of character included in hash then what? no problem we have some solution for that too ok lets began with first step if u are using linux here we are using back track for this first of all you need perl script so donalod and follow the steps to crack a hash i will try to explain each part of this script 


root@bt:~# wget http://bluerose.webuda.com/md5crack.rar


oot@bt:~# unrar x md5crack.rar


root@bt:~# perl md5crack.pl


root@bt:~# ok here is first option ./md5crack.pl ad 1 3 900150983cd24fb0d6963f7d28e17f72


root@bt:~# './md5crack.pl ad 1 3 900150983cd24fb0d6963f7d28e17f72
our command will be like this > perl md5crack.pl ad 1 3 900150983cd24fb0d6963f7d28e17f72
ad is charset if we will use ad option that means it will try only lowercase alphabets and all digits 0-9 now 1 is minimum lenth of hash character like a b c etc and 3 is maximum lenth of hash so this command will try all lowercase alpha numerical from 1 to 3 lenth so if password is like abc or ab9 tc it will show us result now lets see next command line 


root@bt:~# './md5crack.pl aA 3 3 900150983cd24fb0d6963f7d28e17f72
see here aA charset if we will use this option than it will try
lower,uppercase alpha numerical word like "Jeet123" and minimum length 3 and maximum is 3 it means it will try like this aaa,aab,aac ............aAc etc now lets move on last command line 




root@bt:~#'/md5crack.pl aAdx 1 10 900150983cd24fb0d6963f7d28e17f72
here is charset is aAdx it will try lower,upperalpha numerical and specail charater ./*-+& etc. here minimum lenth is 1 and maximum is 10 to it will start from a to aaaaaaaaaa the first command will finish our tast fast but if hash included only lowercase alpha numerical word secound will try uppercase so it will took more than first command and thrid one will took more then first and second command so how to finish our job fast ok for cracking an hash i will say use more shell in one time like see normaly an pass length will be minimum 4 digits so we can start from 4 and maximum may be 10 or more so here what to do we can use 6 shell in one time for first command i will give u example here 
perl md5crack.pl 4 4 900150983cd24fb0d6963f7d28e17f72
perl md5crack.pl ad 4 4 <hash here> this command will try only 4 charcter lenght word so in second shell we can try 5 5 so that will try only 5 charcter lengh word 
perl md5crack.pl ad 5 5 <hash here> like this we can use 6 6, 7 7, 8 8 , etc so minimum and maximum length will be same so task will be finish fast and it depend on charset what kind of charset you are trying like ad,aA or aAdx now as i told here i have an example to make understand>>> text= "r2/." and encrypted  md5 hash  is "5d28a1f53e24a8b0a85d0a53348d49ad" we will try to crack it again in plain text here we will try command line >  perl md5crack.pl aAdx 4 4 5d28a1f53e24a8b0a85d0a53348d49ad


root@bt:~# perl md5crack.pl aAdx 4 4 5d28a1f53e24a8b0a85d0a53348d49ad
5d28a1f53e24a8b0a85d0a53348d49ad != da0df02b98b2c3b9cbbdf43587d56018 (uLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != d1c001e8867850b3c1433ba0ac938103 (vLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != 0d75ced017fb9b8780d6c30f8e36a86b (wLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != c6c1115d33975689dfa7433422a5288b (xLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != ea5d6366e66c39611509b9e36d9853fa (yLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != 9545a19052b086dd4615509cf861d062 (zLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != 5f037f8a2e8160cf740ac02d559bb0fe (ALfa)
5d28a1f53e24a8b0a85d0a53348d49ad != b266bec7dfe619f023b93b8ca87fa762 (BLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != 3601c4c04c4355c16e5bb388df65800c (CLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != dd4f0c6b20d288aacc0db568c26b19ae (DLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != b432ea04463991af047b6c4a1a9bdbbc (ELfa)
5d28a1f53e24a8b0a85d0a53348d49ad != 07d179f416bcfd993a0c9beafd479e70 (FLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != 663e4f51eb5c016df23ad06b4e7e766b (GLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != f1289bb711ed7327da215cc9405efd2d (HLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != f3c865b0b727f8047781c2fd38f30e6f (ILfa)
5d28a1f53e24a8b0a85d0a53348d49ad != f0a6fde524f2b7dd5cda8d45d6c41bd6 (JLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != ed40b98eb7d1351d53c5d777f876839c (KLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != 3495e83370012d26050dbcdc95c42015 (LLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != c8b68f5c9365fcafa5884edaa98801b6 (MLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != e86bf9d6265191b8c63c3c963e6c9a92 (NLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != 0cf5d8630ebb9cabc8db92cbbdb1d5c8 (OLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != 2383f4b6f1117600e880127fb2641fcd (PLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != 07f00734587164f59d4412ac4b170415 (QLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != 1652ddeb95d31881ccb73b589f35563a (RLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != abbc084e67b158e646c0e1a203099067 (SLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != 7dd1d31cf7e1c9030ad3b3e03811fcad (TLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != be5173f471c44ca32a44ad5d03b456be (ULfa)
5d28a1f53e24a8b0a85d0a53348d49ad != c5a73d7da1f995c5fff1429454ff8a46 (VLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != 38caf84bd285eb5d2c5cb4e08ef730d0 (WLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != df71a25b9ad6f9bf01a559635b733083 (XLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != 553117796a60d745d5c19107943f5abf (YLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != b1dd21008ac5cc4a8c9cb03f02fded59 (ZLfa)
5d28a1f53e24a8b0a85d0a53348d49ad != 89dbf10c22720fdd47411736da8a86d0 (1Lfa)
5d28a1f53e24a8b0a85d0a53348d49ad != b7f20e899623426ffd38d99218a215f2 (2Lfa)
5d28a1f53e24a8b0a85d0a53348d49ad != de271d671eaf1db39b9e8202654f610d (3Lfa)
5d28a1f53e24a8b0a85d0a53348d49ad != 197359723ff9ccabe9e13d22ef616412 (4Lfa)
5d28a1f53e24a8b0a85d0a53348d49ad != fb62f20a2c81e65623cf400575e1850a (5Lfa)
5d28a1f53e24a8b0a85d0a53348d49ad != bdc2a4179810b0e37ea31239901d06c4 (6Lfa)
5d28a1f53e24a8b0a85d0a53348d49ad != e4565547c49e868cddf1ba49c85dbd5e (7Lfa)
5d28a1f53e24a8b0a85d0a53348d49ad != f70651b42b4997c9a8c42a7ddd7b7e73 (8Lfa)
5d28a1f53e24a8b0a85d0a53348d49ad != 63e13a11b755c2bd7dc25817ba1ccb1b (9Lfa)
5d28a1f53e24a8b0a85d0a53348d49ad != e7c331e7937 snip...................


process here started how it is trying every thing we can see now when it will finish it will give us correct result se below 



5d28a1f53e24a8b0a85d0a53348d49ad != bd25e63fa49684f2b4e862670485048d ("1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 62875e810adc53487939aa311c770695 ($1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 677ab68f4a1cad69c494c891e2f06aa6 (%1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != c0397120d1b845287c1163a2ef4ea645 (&1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 47cedcd4aa4f17d6eb4d1fc764b24289 (/1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != f2226fade37e452c3337b4d486845258 ((1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != d335549958cb6f7bc30d9bceb0182599 ()1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 36ba42a32c7171b7a671cfa1e6089854 (=1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != c1c57fdc741385631385fd005bf06700 (?1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 0609508323bf700b1606c6b72169b7d8 (-1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != fc1e4aff82e6109d8471acb0279c00e3 (.1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 925a4422871639620285fc1a521424ea (:1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != e35df166288f8b675a38e4c9e39915dd (\1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 4991a349aee2145b4270211cb9155982 (*1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 06095b2620890747f1f1eec52c87daa0 ('1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 0609508323bf700b1606c6b72169b7d8 (-1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 68d126b1f8710d323ebbd88c9077726d (_1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 925a4422871639620285fc1a521424ea (:1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != fc1e4aff82e6109d8471acb0279c00e3 (.1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 33535a71dd3f6ce518ff4439c9086942 (;1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != a11ec1f07e10d299426cf6b3d77b3514 (,1/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 807fed161fa993f41f5e73e06db002d3 (a2/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 8962a9a33e0973e23cb82fbb2c00fe8c (b2/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 4e9da6ec31a0fe9507795827db605dac (c2/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 788ae10879ca928d00cd5079b6631d10 (d2/.)
5d28a1f53e24a8b0a85d0a53348d49ad != ad6408b9ad9f5bde36548b720a42733f (e2/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 527b287eeacc38f7aa9cdd07ad605871 (f2/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 825a9fe2400e410c668e38bbd7e5da43 (g2/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 860f12af83973aa8d4f85108e3dbcc4a (h2/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 859d2caa4780f37f725acbb7e2f2c984 (i2/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 8753b399d39090b695040ebfb39037d4 (j2/.)
5d28a1f53e24a8b0a85d0a53348d49ad != bfcb8d3eaca7f9b7571112a40802d477 (k2/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 7348e7b0caf781e4a6b9221ecb9694a4 (l2/.)
5d28a1f53e24a8b0a85d0a53348d49ad != a3d691f375ea2b2766644c9171dde234 (m2/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 607db55f1ba78e363ae8bb1921478c3a (n2/.)
5d28a1f53e24a8b0a85d0a53348d49ad != ec58f0995b89d9777fc21fd15890cfdb (o2/.)
5d28a1f53e24a8b0a85d0a53348d49ad != d66d37eef3815a28d83e854249f6c734 (p2/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 842d107a1c737608dcb1b12f1f2729dc (q2/.)
5d28a1f53e24a8b0a85d0a53348d49ad != 5d28a1f53e24a8b0a85d0a53348d49ad (r2/.)


**** Password Cracked! => r2/.
root@bt:~#  we got the plain text i hope it will helps if you are not using linux but want to try it on windows i will write an short tut how to use perl on windows or any Question feel free to ask 


Note: use perl md5crac.pl instead of ./md5crack.pl 
correct command will look like this >>>>>>>>>>>perl md5crack.pl ad 5 5 <hash>
if u will try this it will ask for permission >>>>>>>./md5crack.pl ad 55 <hash> wil not work untill u wont change permission of the script .