-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
added screenshots for README.md, actual build. changed name. added ci…
…/cd integration
- Loading branch information
1 parent
9a012c5
commit a1708b9
Showing
16 changed files
with
82 additions
and
8 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,19 @@ | ||
name: CI | ||
|
||
on: | ||
- push | ||
- pull_request | ||
|
||
jobs: | ||
build: | ||
runs-on: ubuntu-latest | ||
|
||
steps: | ||
- uses: actions/checkout@v3 | ||
- name: Set up JDK 17 | ||
uses: actions/setup-java@v3 | ||
with: | ||
java-version: '17' | ||
distribution: 'corretto' | ||
- name: Build with Maven | ||
run: mvn --batch-mode --update-snapshots clean package |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,47 @@ | ||
# JAVA HASHCODE BREAKER | ||
|
||
# Motivation | ||
|
||
The most popular and powerful tools such as [Hashcat](https://github.com/hashcat) | ||
or [John The Ripper](https://www.openwall.com/john/) used to be as default | ||
hash cracking tools. But to some unknown reasons neither hashcat no john couldn't crack simple Java Object hashcode | ||
function. And even a lot of instruments couldn't identify such type of hash. This is very strange because sometimes Java | ||
developers converts users passwords with simple hashcode function and pushes in to database which make dictionary | ||
attack reasonable. Also, if you don't want to pay to crack you hash on resources | ||
as [Hashes.com](https://hashes.com/en/credits) you may use this tool for testing. | ||
|
||
### Some additional information | ||
[Hashcat: issue Java hashCode() Token Length Exception with Hex integer](https://github.com/hashcat/hashcat/issues/3559) | ||
|
||
![simple_java_hash.png](assets%2Fsimple_java_hash.png) | ||
![hash_unknown_hash.png](assets%2Fhash_unknown_hash.png) | ||
![hashid_unknown_hash.png](assets%2Fhashid_unknown_hash.png) | ||
![hashcat_unknown_hash.png](assets%2Fhashcat_unknown_hash.png) | ||
![john_unknown_hash.png](assets%2Fjohn_unknown_hash.png) | ||
|
||
# Usage | ||
1. Clone the repository | ||
2. Change path to builds | ||
``` | ||
cd java_hashcode_breaker/builds | ||
``` | ||
3. Run .jar file with options below | ||
``` | ||
java -jar <current build vesion>.jar -h <provide hash here> -w <path to wordlist> | ||
``` | ||
4. You can add -v option for verbose output | ||
``` | ||
java -jar <current build vesion>.jar -h <provide hash here> -w <path to wordlist> -v | ||
``` | ||
5. Happy cracking. | ||
### Example of work | ||
Without verbosity | ||
![example.png](assets%2Fexample.png) | ||
With -v option | ||
![example_verbose.png](assets%2Fexample_verbose.png) | ||
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file not shown.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
2 changes: 1 addition & 1 deletion
2
...ploitable/javahashcodecracker/Config.java → ...ploitable/javahashcodebreaker/Config.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
2 changes: 1 addition & 1 deletion
2
...javahashcodecracker/HashCrackService.java → ...javahashcodebreaker/HashCrackService.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
2 changes: 1 addition & 1 deletion
2
...acker/JavaHashcodeCrackerApplication.java → ...eaker/JavaHashcodeCrackerApplication.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
File renamed without changes.