someszch da' blogs

Senin, 11 Mei 2009

THC Hydra

THC-Hydra

A very fast network logon cracker which support many different services
hydra-5.4-src.tar.gz

Last update 2006-05-05

[0x00] News and Changelog

       PLEASE NOTE: I have currently not much time for coding, however some
       modules need to be rewritten. If you have time and experience to help
       this community project, please contact me at vh (at) thc (dot) org.

 CHANGELOG for 5.4:
 ###########
 * Fixes to the http modules as some Apache installations are picky
 * The MySQL module also works with mysqld-5.0, updated
 * Added AS/400 return code checks to pop3 module
 * Fixed memory leaks in the http-form module.
 * Implemented a proposal by Jean-Baptiste.BEAUFRETON (at) turbomeca.fr to
   check for "530 user unknown" message in the ftp module
 * Added a performance patch by alejandro.mendiondo (at) baicom.com. This one
   needs stability testing!
 * Beautification to remove compiler warnings of modern gcc

 Have fun!


[0x01] Introduction

 Welcome to the mini website of the THC Hydra project.

 Number one of the biggest security holes are passwords, as every password security study shows.
 Hydra is a parallized login cracker which supports numerous protocols to attack. New modules
 are easy to add, beside that, it is flexible and very fast.

 Currently this tool supports:
   TELNET, FTP, HTTP, HTTPS, HTTP-PROXY, SMB, SMBNT, MS-SQL, MYSQL, REXEC,
         RSH, RLOGIN, CVS, SNMP, SMTP-AUTH, SOCKS5, VNC, POP3, IMAP, NNTP, PCNFS,
         ICQ, SAP/R3, LDAP2, LDAP3, Postgres, Teamspeak, Cisco auth, Cisco enable,
         LDAP2, Cisco AAA (incorporated in telnet module).

 This tool is a proof of concept code, to give researchers and security
 consultants the possiblity to show how easy it would be to gain unauthorized
 access from remote to a system.

[0x02] Disclaimer

 1. This tool is for legal purposes only!
 2. If this tool is used as part of a commercial service (e.g. pentest),
    name, version and web address of this tool must be mentioned in the report.
 3. If this tool is incorporated into a commercial tool (means: it costs
    money, has license costs or upgrade fees, etc.) or called by it,
    the name, version and web address of this tool must be mentioned in the
    report output of the tool. Addtionally, a commercial version, key file,
    etc. must be made available to the author free of charge.
 4. Beside 1. to 3. above, the GPL 2.0 applies.

[0x03] Documentation

 Hydra comes with a rather long README file that describes the
 details about the usage and special options.

[0x04] Development & Contributions

 Your contributions are more than welcomed!

 If you find bugs, coded enhancements or wrote a new attack module for a service,
 please send them to vh (at) thc (dot) org

 Interesting attack modules would be:
 Oracle SQL*Net, PC-Anywhere, SSHv1, BGPv4, HTTP-NTLM, PPTP, ...
 (or anything else you might be able to do (and is not there yet))

[0x05] Screenshots

 
 (1) Target selection

 
 (2) Login/Password setup

 
 (3) Hydra start and output

[0x06] The Art of Downloading: Source and Binaries

 For your pleasure, Hydra comes as source and binary release.

 1. The source code of Hydra: hydra-5.4-src.tar.gz
    (compiles on all UNIX based platforms - even MacOS X, Cygwin on Windows, ARM-Linux, etc.)

 2. The Win32/Cywin binary release: hydra-5.4-win.zip
    (everything you need to run hydra on win32 platforms is in this zip file)

 4. The ARM binary release: hydra-5.0-arm.tar.gz (soon updated)
    (created by tick (at) thc (dot) org - everything except SAP R/3 is supported,
     runs on all Handhelds with ARM processors running Linux, e.g. iPaq, Zaurus, etc.)

 3. The Palm binary release: hydra-4.6-palm.zip
    (created by snakebyte (at) gmx (dot) de - does not support all attack modules yet)
          [NOTE: the Palm release has got a different source tree. Therefore not all]
          [      modules are supported, and updates are not very often.             ]

Comments and suggestions are welcome.

Yours sincerly,

van Hauser
The Hackers Choice
http://www.thc.org

John the Ripper is free and Open Source software, distributed primarily in source code form. If you would rather use a commercial product tailored for your specific operating system, please consider John the Ripper Pro, which is distributed primarily in the form of “native” packages for the target operating systems and in general is meant to be easier to install and use while delivering optimal performance.

Proceed to John the Ripper Pro homepage for your OS:

John the Ripper 1.7.3 Pro for Linux
John the Ripper 1.7.2 Pro for Mac OS X (also included is a beta version of 1.7.3.1 Pro)

Download one of the latest free “development” versions:

or the latest free “stable” release:

Note: a few Windows “antivirus” and “anti-spyware” products have started to recognize password recovery tools as if they were “trojans”. This is how those products’ vendors inflate their detected “virus” counts. The effect is that end-users are no longer able to check password recovery software for real viruses. If this affects you, please complain to your antivirus vendor.

Please refer to these pages on how to extract John the Ripper source code from the tar.gz and tar.bz2 archives and how to build (compile) it.

The only change between 1.7.0.1 and 1.7.0.2 is irrelevant for 32-bit platforms, hence there are no builds of 1.7.0.2 for Windows and DOS (they would have been exactly the same as those of 1.7.0.1).

In practice, 1.7.2 (a “development” version) has been around for a long time now, and it has been found to be at least as stable as 1.7.0.2, so the use of 1.7.2 is recommended.

Chain & Abel

Cain & Abel is a password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, recovering wireless network keys, revealing password boxes, uncovering cached passwords and analyzing routing protocols. The program does not exploit any software vulnerabilities or bugs that could not be fixed with little effort. It covers some security aspects/weakness present in protocol’s standards, authentication methods and caching mechanisms; its main purpose is the simplified recovery of passwords and credentials from various sources, however it also ships some “non standard” utilities for Microsoft Windows users.

Cain & Abel has been developed in the hope that it will be useful for network administrators, teachers, security consultants/professionals, forensic staff, security software vendors, professional penetration tester and everyone else that plans to use it for ethical reasons. The author will not help or support any illegal activity done with this program. Be warned that there is the possibility that you will cause damages and/or loss of data using this software and that in no events shall the author be liable for such damages or loss of data. Please carefully read the License Agreement included in the program before using it.

The latest version is faster and contains a lot of new features like APR (Arp Poison Routing) which enables sniffing on switched LANs and Man-in-the-Middle attacks. The sniffer in this version can also analyze encrypted protocols such as SSH-1 and HTTPS, and contains filters to capture credentials from a wide range of authentication mechanisms. The new version also ships routing protocols authentication monitors and routes extractors, dictionary and brute-force crackers for all common hashing algorithms and for several specific authentications, password/hash calculators, cryptanalysis attacks, password decoders and some not so common utilities related to network and system security.

Download Cain & Abel v2.0 for Windows 9x (discontinued and not supported anymore)
MD5 - A14185FAFC1A0A433752A75C0B8CE15D
SHA1 - 8F310D3BECC4D18803AF31575E8035B44FE37418

Download Cain & Abel v4.9.22 for Windows NT/2000/XP
MD5 - 6BA2BC1275BE5A75D6C6448FCBF65FA1
SHA1 - 98005421CF59250172B611CCA4226E742A98A9A6

WARNING !!! The password list file format is changed between version 4.9.10 and 4.9.14. Old LST files are not compatible anymore so it is strongly suggested to backup your files before upgrade to this new release.

Cain & Abel User Manual is included in the installation package and also available on-line so you can view all the program’s features without the need to install the program. The on-line version of the manual requires a JavaScript enabled browser.

View Cain & Abel on-line User Manual

Brutus

Introduction

Brutus is one of the fastest, most flexible remote password crackers you can get your hands on - it’s also free. It is available for Windows 9x, NT and 2000, there is no UN*X version available although it is a possibility at some point in the future. Brutus was first made publicly available in October 1998 and since that time there have been at least 70,000 downloads and over 175,000 visitors to this page. Development continues so new releases will be available in the near future. Brutus was written originally to help me check routers etc. for default and common passwords

Features

Brutus version AET2 is the current release and includes the following authentication types :

	HTTP (Basic Authentication)
	HTTP (HTML Form/CGI)
	POP3
	FTP
	SMB
	Telnet
	Other types such as IMAP, NNTP, NetBus etc are freely downloadable from this site and simply imported into your copy of Brutus. You can create your own types or use other peoples.

Baca selengkapnya »

Windows XP Service Pack 3: Home/Pro/Media Center (9 in 1)

Release year : 2008
Version : 5.1
Platform : x86 - 32 bit
Language interface : English
Crack : Not required
Bootable : Yes
CD-Keys : Included
ISO File size : 846,8 Mb

- Windows XP Home OEM with Service Pack 3
- Windows XP Home Retail with Service Pack 3
- Windows XP Home Upgrade with Service Pack 3
- Windows XP Media Center 2005 with Service Pack 3
- Windows XP Pro Corp with Service Pack 3
- Windows XP Pro OEM with Service Pack 3
- Windows XP Pro Retail with Service Pack 3
- Windows XP Pro Upgrade with Service Pack 3

System requirements :
- Intel Pentium/Celeron, AMD 300 MHz
- 128 MB RAM
- 1,5 GB of free space
- VGA which supports at least 800×600
- CD-ROM
- Keybaord and mouse

Microsoft Windows Vista SP1 Game Edition 2008

Windows Vista SP1 Game Edition Eng 2008 exclude:

-Accesories:
Accesibility
Speech Support
Welcome Center
WordPad

-Drivers:
Display Adapters
Diva Server
Printers
QLogic Fibre Channel Adapter
Scanners
Sound Controllers

-Games:
Inbox Games
Premium Inbox Games

-Languages:
Japanese
Korean
Simpled Chinese
Traditional Chinese

-Multimedia:
Media Center
Movie and DVD-maker
Music and Video Samples
Sample Pictures
SideShow

-Network:
IIS (Internet Information Services)

-System:
Natural Language
Parental Controls
Security Center
Sync Center
Tablet PC
Windows Defender
Windows Easy Transfer
Windows SAT
————————-
Also:
UAC (User Account Control): Off
Hibernation: Off

System Requirements:
Processor: 1.0 Ghz
RAM: 384 Mb
Video card: 32
DVD

[Activation]
http://rapidshare.com/files/125012064/ActivationSP1_Game_Edition_Eng_2008_DVD.rar

Windows Vista Ultimate SP1 32/64Bit Retail TechNet

Contains:
Home Premium x64 l x32
Home Basic x64 l x32
Ultimate x64 l x32
Business x64 l x32

[Activator]
http://rapidshare.com/files/128327386/bu_spyro_soldiers.rar

someszch da' blogs

Senin, 11 Mei 2009

THC Hydra

Jhon The Ripper

Chain & Abel

Brutus

Windows XP Service Pack 3: Home/Pro/Media Center (9 in 1)

Microsoft Windows Vista SP1 Game Edition 2008

Windows Vista Ultimate SP1 32/64Bit Retail TechNet

Mengenai Saya

Kategori

Pengikut

Arsip Blog