News - Main Page
Whitepapers
Tools and Download
Presentations
Related
:sucrack

Examples

Installation

First of all, you'll want to upload the source to the target system (assuming you don't have a pre-compiled copy that will work):

$ tar xfz sucrack-1.2.3.tar.gz
$ cd sucrack-1.2.3
$ ./configure
$ make
$ cd src

Obviously, you won't have the luxury of running "make install" yet as you're not root.

Running a Dictionary Attack on an Account

On my dual-core test system, this 100-thread attack ran at around 50 guesses per second.

$ ./sucrack -w 100 -u root dict.txt
password is: test123

Bear in mind that if the target system has little memory or little CPU power, running 100 threads may DoS the system, so be careful.

Permuting the Dictionary

Check out the Usage page for list of options to alter the case, append digits, etc. to the dictionary. In the example below, we try each word in lower case and append a digit:

$ ./sucrack -w 100 -r -l ad -u smbguest dict.txt
password is: test123

Reading Passwords from STDIN

Besides of getting passwords from a dictionary or in the incremental mode, you can use the password generator of your choice and feed sucrack with passwords. John the Ripper's great password generator can be used this way for instance:

$ john --stdout --incremental | sucrack -

 

Last Updated : 31/03/2008 16:51:59