PasswordsPro is a multifunctional application to work with passwords.
PasswordsPro is designated to recover passwords for following types of hashes:
■ MySQL
■ MySQL5
■ MD4
■ MD4 (Base64)
■ MD4 (HMAC)
■ MD5
■ MD5 (Base64)
■ MD5 (HMAC)
■ MD5 (Unix)
■ MD5 (APR)
■ SHA-1
■ SHA-1 (Base64)
■ SHA-1 (HMAC)
As well as for hashes used by various PHP-programs:
■ md5(md5($pass))
■ md5(md5($pass).$salt)
■ md5(md5($salt).md5($pass))
Here are some key features of "PasswordsPro":
Passwords recovery using following methods:
· Preliminary attack;
· Full brute-force attack (including distributed attack);
· Mask attack;
· Simple dictionary attack;
· Combined dictionary attack;
· Hybrid dictionary attack;
· Pre-calculated Rainbow-tables attack;
· Recovery of passwords up to 128 symbol length;
· Recovery of passwords for incomplete hashes of any type;
· User's hashes editor;
· Quick change of hashes type for one or several users;
· Search of data in the list of imported users;
· Quick add of the hash using dialog box;
· Quick check of the current password for all imported users;
· Use of symbol replace tables for the simple dictionary attack;
· Unlimited number of dictionaries used for dictionary attack;
· Unlimited number of tables used for pre-calculated Rainbow-tables attack;
Limitations:
· Maximum number of users can be imported: 1
What's New in This Release: [ read full changelog ]
· Essentially speeded up the preliminary attack when checking passwords from the PaswordsPro.dic file of a large size.
· Added verifying hashes and passwords they match to.
· Updated API for working with plugins - now the PPM_MODIFY_HASH message allows changing passwords too on the hash list; that opens unlimited opportunities for creating the plugins, which would perform various attacks on hashes and automatically recover the passwords to them. After that, the passwords would be imported to PasswordsPro and (if necessary) automatically verified against the hashes.
· I.e. now you can create any attack as a plugin - by index (or hybrid) Rainbow-tables, create some client plugin for a distributed attack or, finally, come up with something else.
· To demonstrate the new features, I have released a new plugin - "NTLM Password Finder", for more, please see here.
· Added new hashing module: SHA-256(md5($pass)).dll.