Full Disclosure mailing list archives

New version of JBrute


From: Gonzalo Camino <gonzalocamino () gmail com>
Date: Thu, 19 Sep 2013 00:38:43 -0300

Hey folks,


There's a new version of JBrute, an Open Source, multi-platform tool to
"decrypt" hashed passwords written in Java. It supports both brute-force
and dictionary attack methods, with a built-in rule pre-processor similar
to the JTR one, and it actually supports several standard algorithms and
several algorithms from propietary apps  (like Microsoft SQL Server,
Oracle, SYBASE, and so on).


The change log of the current version:


v0.94:

Date: 19/09/2013

-----

Fixes:

------

 _ Performance improved dramatically (around 900%) for dictionary
decryption method (all rules). Now I am using StringBuilders instead
Strings in the rule preprocessor (DictionaryRulePreProcessor class).

 _ Performance improved for Rule Action "V".

 _ Performance improved for Rule Action "R".

 _ Performance improved for Rule Action "t".

 _ Parameter "--stdout" for dictionary decryption is working now.

 _ Wrong reject result with complementary character classes in "%" reject
condition.


Download page: https://sourceforge.net/projects/jbrute/files/latest/download


Homepage           - https://sourceforge.net/projects/jbrute

Blog                    - https://sourceforge.net/p/jbrute/blog

Documentation     - https://sourceforge.net/p/jbrute/wiki/Home

Author                 - Gonzalo Camino

License               - GNU General Public License version 3.0 (GPLv3)


Please, take a time to test it and send me comments! I need volunteers for
deep testing.


Cheers,

Gonzalo.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: