sucrack | Content

Mon, 31 Mar 2008 16:21:52 GMT

sucrack is a multithreaded Linux/UNIX tool for brute-force cracking local user accounts via su.

This tool comes in handy when you've gained access to a low-privilege user account but are allowed to su to other users. Many su implementations require a pseudo terminal to be attached in order to take the password from the user. This can't be easily achieved with a simple shell script. This tool, written in C, is highly efficient and can attempt multiple logins at the same time.

Please be advised that using this tool will take a lot of the CPU performance and fill up the logs quite quickly. sucrack is so far known to be running on FreeBSD, NetBSD, Linux.

Check out the Usage and Examples page for more information.

phrasen|drescher | Content

Fri, 27 Jun 2008 11:28:34 GMT

phrasen|drescher is a modular and multi processing pass phrase cracking tool. In version 1.1 it comes with two plugins with the purposes to:

crack pass phrases of RSA or DSA keys
crack MS SQL 2000/2005 SHA1 hashes
remote SSHv2 account brute forcing
HTTP login form account cracking

A simple plugin API allows an easy development of new plugins.

Further features are:

Modular
Multi Processing
Dictionary attack with or without permutations (uppercase, lowercase, l33t, etc.)
Bruteforce attacks for custom character sets
Runs on FreeBSD, NetBSD, OpenBSD, MacOS and Linux

Check out the Usage and Examples page for more information.

Portcullis Labs - Nico

sucrack | Content

phrasen|drescher | Content