SecuraBit before it Bytes

So unless you’ve been living under a rock for the past couple of years, you should be quite familiar with the term “rainbow tables” and know how unbelievably awesome these are.  A fellow colleague and I were in a pinch the other day and had no way of cracking an md5 hashed password as we simply didn’t have access to a set of rainbow tables, nor did we have time to wait for 0phcrack and JTR to brute force it.  So we stumbled across a free site that has over 1.6 million known hashes available.

The site is called Hash Mash and it simply allows you to plug in the md5 and just hit decrypt or create an md5 using the encrypt tab.  Rainbow tables work unbelievably fast and has helped many people in my situation as well as the forensics field.  However be aware that if the password is encrypted then you will run into some issues that will require a higher level of understanding in order to break the encryption, for starters, knowing the original encryption algorithm being used.  Be sure to check this site out for all of your “ethical” cracking needs.

**If you are in the position to download rainbow tables for offline use then you can visit the Shmoo Group and download them there too.  Happy cracking [|:) <-my interpretation of a white hat.

As of today we know for certain that at least one of our crew will be at DEFCON 16.  We’re trying to arrange to have some T-shirts and stickers available to hand out, and would very much appreciate any donations that you can send our way.  A donation in any amount will result in an optional plug on our show for you (and your website if you have one).  There will be goodies given out by us in any event, but who doesn’t want a cool T-shirt?

Thanks for listening!

We’ve activated and populated the events calendar for the next month or so.  It looks like a normal wordpress posts calendar but contains events instead.  If you have any upcoming events related to the security world please let us know and we’ll add them!

On this episode of SecuraBit:

Anthony, Chris, Christopher, Jay, and special guest Rob (mubix) discuss:

Signature based anti-virus dead?
Rubbermaid Botmaster Sentenced
BackTrack3 Final released!
Using Google Earth to crash neighboring pools
Crazed Bovine Traversal
Distributed Honeypot Project

The iTunes link on the front page here works again!!!  Check out the forums, and our IRC at irc.freenode.net #securabit.  Any feedback is welcomed either through the contact form, or at feedback@securabit.com, or on the forums.  Thanks for listening!!

 

 SecuraBit Episode 5 [72:22m]: Play Now | Play in Popup | Download

If you’d like to contribute to our pool of articles to talk about feel free to use the del.icio.us service and tag the links you want us to see with the “securabit” tag. Please don’t tag goatse.