rainbowcrackalack icon indicating copy to clipboard operation
rainbowcrackalack copied to clipboard

Newbie question on using crakalack

Open MordicusEtCubitus opened this issue 4 years ago • 1 comments

Hi, First thanks you for this great open source rainbow table software working on GPU ! That's nice ! I'm just starting using it and a bit confused:

  • I've created a rainbow table using command: crackalack_gen ntlm ascii-32-95 8 8 0 422000 67108864 X
    • I do not understand how you choose the values 422000, 67108864 and X and what they really mean
  • Produced table is named ntlm_ascii-32-95#8-8_0_422000x67108864_0.rt and is near 1Go on disk
    • I've moved it under rt folder
  • I've then generated a few passwords using python ./scripts/create_ntlm_passwords.py 8 10
    • This produced 2 passwords files that I clearly understand :)
  • I've tried to run ./crackalack_lookup rt/ random_ntlm_hashes_8_chars.txt but it complains explaining this rt//ntlm_ascii-32-95#8-8_0_422000x67108864_0.rt is not a valid table suitable for lookups! (Hint: it may not be sorted.)
  • So I've tried to sort the table using ./scripts/rt_sort.sh rt rts
    • But file rainbowcrack.rtsort is not found

Where this file should came from? Could you provide explanation about the usage of the software so I could contribute by writing a documentation in return?

Thanks a lot

Gaël,

MordicusEtCubitus avatar Sep 21 '21 22:09 MordicusEtCubitus

I've created a rainbow table using command: crackalack_gen ntlm ascii-32-95 8 8 0 422000 67108864 X I do not understand how you choose the values 422000, 67108864 and X and what they really mean

It takes quite a lot of explaining, but only those who need to generate new tables would need to know. And since the NTLM 8 & 9 tables are already generated and freely available, there isn't much of a point for people to generate more (at least for now).

I've tried to run ./crackalack_lookup rt/ random_ntlm_hashes_8_chars.txt but it complains explaining this rt//ntlm_ascii-32-95#8-8_0_422000x67108864_0.rt is not a valid table suitable for lookups! (Hint: it may not be sorted.)

Tables that you generate are in a raw format. They must first be sorted. I use the Rainbowcrack's rtsort tool to do this (see http://project-rainbowcrack.com/).

However, you need to generate THOUSANDS of tables in order to crack passwords at a reasonable rate. So unless you plan on spending thousands of dollars in electricity and 6 - 18 months of time, generating your own tables won't be useful.

jtesta avatar Sep 22 '21 00:09 jtesta