![]() ![]() A dual processor quad core machine can easily run 8 iterations at once without taking a hit – allowing, for example, one to grind out 1-8 character passwords at once.Īn interesting find from one of the first passwords recovered this way was when the user told me that he was positive the recovered password (the aam?$Qk one from the earlier screenshot) was not his original password. With this combination, the tool was able to recover a password in a little over half an hour after trying over a billion combos – a rate of almost 500,000 words per second – with the ability to run as many attempts at once as your machine can handle. Speeding this process up was the maskprocessor utility from the hashcat password recovery suite. Using that data, it was easy enough to write a 20 line script to hash a password and compare it to the defined password hash. Thankfully, the author of the excellent unarchive utility The Unarchiver provided enough data on his site for a non-programmer like myself to recreate the algorithm the password hash in Perl. ![]() I could build a Rainbow Table with that knowledge – a task which would take a large amount of time the first run through, but then would be searchable afterwards.Įven with that, the wordlist would be extravagantly huge (almost 66GB when compressed as a GZIP for every possible 5 character password). ![]() While I was successful in getting access to a simple four letter dictionary word password, it was clear the speed at which the tool ran (even on modern machinery) was not going to deliver results.īy running a similar script that, rather than break a single archive, just created thousands of archives with varying passwords, I was able to find out that, thankfully, it appears that the StuffIt 5 password scheme always hashes a password to the same 10 hexadecimal value. This was, to put it bluntly, an exercise in watching paint dry (35 words per second- sped up to about 435 words per second with the SDK- which needs to be licensed). You can still purchase Stuffit Deluxe 2011 for both Windows and Mac, but for most people there will never be a need.Ī few years ago, I wrote an application called Kasper that used the native StuffIt Deluxe command line tools to brute force an archive’s password using a wordlist. StuffIt was the popular compression tools for Mac users until the Mac OS X-era, when it was overtaken by the standard ZIP format (and price per gigabyte of storage reached a point where compression just wasn’t as critical). wag يَبْقى ساكِنا، لا يقوم بِعَمَلٍ أو حَرَكَه седя кротко manter-se firme ani se nehnout sich nicht vom Fleck rühren ikke at gøre noget κάθομαι και περιμένω χωρίς να κάνω κτ.I don’t profess to be an expert programmer or a skilled security researcher, but I’ve spent a lot of time over the last dozen plus years working on recovering old passwords in StuffIt archives. The best thing to do is to sit tight and see if things improve. To keep the same position or be unwilling to move or act. We'll just have to sit tight till we hear from him → tendremos que esperar sin hacer nada hasta recibir noticias suyas To sit tight "sit tight, I'll be right back" → -no te muevas, ahora vuelvo To be sitting pretty → estar bien colocado or situado Will you sit still! → ¡te quieres estar or quedar quieto (en la silla)! To sit still/ straight → estarse or ( LAm) quedarse quieto/ponerse derecho (en la silla) He sat over his books all night → pasó toda la noche con sus libros ![]() We're sitting on a fortune here → estamos ante una mina de oro They were sitting in a traffic jam for two hours → estuvieron dos horas metidos en un atasco sin moverse To sit at home all day → pasar todo el día en casa (sin hacer nada) She was sitting at her desk → estaba sentada delante de su mesaĭon't just sit there, do something! → ¡no te quedes ahí sentado, haz algo!Īre you sitting comfortably? → ¿estás cómodo (en la silla)? (= be seated) → estar sentado → estar posado ( on eggs) → empollar Collins COBUILD English Usage © HarperCollins Publishers 1992, 2004, 2011, 2012 sitġ. ![]()
0 Comments
Leave a Reply. |