Instant Password Recovery Tool
I made this back in April 2004, it only took a couple of hours to write and build the database.
Basically, I took a wordlist of 535,683 words and hashed them in MD5, SHA1 & LANMAN. The results are stored in a simple MySQL table, indexes on that table make lookups REALLY fast and thats about it. You enter the hash you want to lookup, select the type of hash it is *if you know it*, then hit “Look It Up”.
The MySQL table is fairly lightweight, 535,683 rows, 48,164 KB total ( 37,030 KB of Data, 11,134 KB of Indexes ).
It’s mostly useful for recovering / auditing passwords on web applications like PhpBB & Bugzilla where the database stores unsalted hashes. It found about 90% of the passwords on a PhpBB message board I administer. You can also use it to test Windows NT/2000 passwords provided you’ve extracted the LANMAN hashes from the system first.
About Me
This is the personal Weblog of Michael Cutler. Here you will find a mixture of information, thoughts, ideas and other stuff.
I have been around computers for 17 years now, starting out on a Sinclair Spectrum 48k with cassette tape and those really annoying chunky keys. Over the years I have gained experience in a huge range of languages and platforms; everything from PIC microcontrollers and embedded devices through to the latest OO & XML technologies.