Author ArchiveI just calculated 9704448 keys for Thompson routers. These routers ship with a default essid and a default wpa key which most people do not change. The keys can be calculated from a range of default essids and are all in uppercase hex. Adding these keys should greatly increase the chances of recovering wpa keys from Thompson routers.          Last Saturday Alex and I were asked by Adrian Crenshaw of irongeek.com to come out and help teach a class on password exploitation with him. The class lasted 6 hours and Alex and I got two of them to talk about our favorite new password cracking software hashcat. This year at Def Con 18 the security company Kore Logic sponsored a password cracking competition. Naturally we here at Question-Defense wanted a shot at the title. We enlisted the guys over at Hashcat to help out on our team. We believe that Hashcat takes password cracking to a whole new level and we have gotten to be good friends with the developers. Me and Alex headed out to Las Vegas to enter the competition and we had a blast. Over the last week we have been compiling, sorting, removing and adding a massive amount of words to our wpa wordlist. Some of these were grabbed from leaked sites, some were generated by us and many were donated by members of the community. One new feature we have tried to implement is common 8 and 10 char hex only keys which will match many of the routers which have a default key which is hex such as Thompson and BT-Home hub. We have also gone through great trouble to remove most of the words with special chars, over the last 6 months of running the wpa cracker we have hardly seen any cracked keys with special chars so we removed all words which didn’t have the most common ones like ‘ ” # $ and @. This will increase the current cracking time from 1.5 hours to around 3 hours. There will be not be a increase in the cost for these new features. We are not really interested in making money, the small amount we charge is only to cover hosting and the electrical bill. The previous list contained around 540 million words and the current list now contains about 980 million words. Special thanks to anyone who donated a list to the site. Thanks purehate & dakykilla When we did the rebuild of the tools server we used a Intel i7 920 as our CPU. This was mainly due to our budget, which was good, but not unlimited. After we got the server together and ran it for a few weeks we decided a upgrade of the CPU was probably in order. We ordered a Intel i7 965 Extreme processor and I put it in a few nights ago. With no over clocking at all its already a pretty impressive CPU. I hope to get some bench marks in the next week or so and compare them to the 920 bench marks. This push’s our tools server up to about 100k pmk/s when it comes to WPA Cracking. Alex and I recently upgraded the server that runs our tools applications. We figured some people may be interested in what powers our applications so we decided to make a post showcasing the upgrade. As every one knows, our tools are GPU powered but we have never talked much about the actual guts of the machine. We added a SHA1 GPU powered hash cracker to the page today. I will be adding a few tutorials on SHA1 in the near future. As with any of our tools, if the default configurations do not meet your needs please feel free to use the contact page to send us a request for a special crack. In case you hadn’t noticed we have moved the domain and and merged with our parent site Question-Defense. The site started as a side project with its own domain but it has been doing so well that we decided to make it a permanent part of Question-Defense. We will be constantly improving the suite of tools on this site. We have a NTLM cracker brewing and a few other hash generators and such we will be launching soon. Thanks to digip for the new headers. I had a few people give me some wordlists they wanted to see added to the service. After running them through my optimizer scripts I ended up trimming them down quite a bit but I still ended up with 4844845 new words for the list. This brings the total number of words currently in the list to 547167571. I will continue to optimize the list for the best results. We are now officially launching our new wpacracking service at the start of 2010. This launch is done in conjunction with Narfonix and Question-Defense. We have been working very hard to bring you a service which is both affordable and useful. We will be continuing to update the user interface and adding content to the site as needed in order to make this a truly high quality online interface for auditing WPA captures. |
tools.question-defense.com (RSS)