Shulou(Shulou.com)05/31 Report--

This article mainly shows you "what is MaskProcessor", the content is easy to understand, clear, hope to help you solve your doubts, the following let the editor lead you to study and learn this article "what is MaskProcessor?"

Mask processor

MaskProcessor is a powerful advanced dictionary generator that supports character set configuration for each location. To achieve brute force cracking attacks.

Mask attacks that are more violent than brute force cracking

Researchers developed MaskProcessor because the traditional brute force cracking technology is no longer applicable to the existing network security environment, and the community also hopes to reduce a small amount of key space of passwords to a more efficient password space.

Let's give an example. Some say that the password we need to crack now is "Julia1984".

In traditional brute force cracking attacks, we need a character set dictionary file that contains all uppercase letters, all lowercase letters and all numbers, that is, a dictionary that mixes all letters and numbers. The length of the password to be cracked is 9 characters, so we must raise 62 ^ 9 (13.537.086.546.263.552) password combinations. Assuming that our password cracking rate is 100m / s, it will take more than 4 years to crack the password.

In password Mask attacks, that is, when using MaskProcessor, we first understand the way humans design passwords. The password to be cracked above matches a simple but general pattern, that is, "name + year". Therefore, we can also configure the attack mode to repeat only uppercase letters in the first place, while it is very rare for uppercase letters to appear only in the second or third place. Therefore, when using mask attack technology, we can reduce the key space to 522626262610610101010 (237.627.520.000) password combinations. At this time, if we also crack the password at the speed of 100m / s, it will only take 40 minutes to complete the task.

Tool download

The majority of researchers can use the following command to clone the project source code locally:

Git clone https://github.com/hashcat/maskprocessor.git project compilation

Just run the make command directly under the project source directory.

Technical details

If the length of the password to be cracked is 8 bytes, then our mask must consist of up to 8 placeholders.

One level is a simple screw that can configure the character space of the default password engine by using placeholders.

Placeholders can be custom character set variables, built-in character set variables, or static characters.

The variable is determined by "?" The symbol is followed by a built-in character set (lmemuredrecovera) or a custom character set variable name (1, 2, 3, 4).

Static characters are not simply represented by characters here, for example, if we want a static character "?" Then we have to write "?" .

Built-in character set? L = abcdefghijklmnopqrstuvwxyzu = ABCDEFGHIJKLMNOPQRSTUVWXYZ? D = 0123456789? S = «spaces »! "# $% &'() * +, -. /:; @ [] ^ _ `{|} ~ a =? l? U? d? sb = 0x00-0xff custom character set

Here we need to configure four custom character sets with four command line arguments:

-- custom-charset1 = CS--custom-charset2 = CS--custom-charset3 = CS--custom-charset4 = CS

These command-line parameters have four similar abbreviations, called-1, # 1, # 2, # 2, # 2, # 3 and-4. You can specify characters directly on the command line.

Password length increment

A password length must be specified in a Mask attack. In a way, if we use a mask mask of "? l? then we can only crack a password that is eight characters long. However, if we want to try to crack a password that is 7 characters long, that's not going to work. At this point, we need to repeat similar attacks many times, each time above the mask, but MaskProcessor can automatically increase the password space by using the "--increment" tag.

L? two? L? L? L? L? L? L? L? L? L? L? L? L? L? L? L? L? L? L? L? L? L? L? L? L? L? L? L? L? L? L? L? L? L performance analysis

At present, MaskProcessor is the fastest dictionary generator in the world. The following is called the testing of some mainstream system architectures:

AMD Athlon ™64 X2 dual-core processor 3800 processor 75.80 M / s (per core)

AMD FX ™- 6100 six-core processor: 138.20 M / s (per core)

Intel (R) X5650 CPU X5650 @ 2.67GHz:97.42 M / s (per core)

Intel ®i7-920 71.50m / s (per core)

To avoid exceptions during testing, all output data will be stored in the / dev / null directory.

Sample use of tools

The following command creates a corresponding predetermined password space:

Command:? L? L? L? L? L? L? L? L password space: aaaaaaaa-zzzzzzzz command:-1? L? D? one? one? one? one? 1 password space: aaaaa-99999 command: password? Password space: password0-password9 command:-1? L? U? one? L? L? L? L? L19? D? D password space: aaaaaa1900-Zzzzzz1999 command:-1? Dabcdef-2? L? U? one? one? two? two? two? two? 2 password space: 00aaaaa-ffZZZZZ command:-1 efghijklmnop? one? one? 1 password space: screenshot of eee-ppp tool running

The above is all the content of this article "what is MaskProcessor?" thank you for reading! I believe we all have a certain understanding, hope to share the content to help you, if you want to learn more knowledge, welcome to follow the industry information channel!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.