+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: [RELEASE] HUMMINGBIRD v0.1 - VERY FAST MD5 HASH CRACKER [MULTITHREADED] [OPEN SOURCE] (/showthread.php?tid=1432873)
[RELEASE] HUMMINGBIRD v0.1 - VERY FAST MD5 HASH CRACKER [MULTITHREADED] [OPEN SOURCE] - malo1992 - Jun 30, 2011
!!! HUMMINGBIRD VERSION 0.1 !!!
PASSWORD RECOVERY TOOL FOR MD5 HASHS
USING BRUTE FORCE
Probably one of the fastest CPU-based MD5 hash brute forcer that you ever used!
# PICTURES #
[IMG]http://img204.imageshack.us/img204/3194/hummingbird1.jpg[/IMG]
[IMG]http://img3.imageshack.us/img3/3910/hummingbird3b.jpg[/IMG]
[IMG]http://img703.imageshack.us/img703/2554/hummingbird4.jpg[/IMG]
# CREDITS #
I could not have developed this application without the great work of Anthony Williams ( boost/thread,
http://www.boost.org/ ) and Benjamin Grüdelbach ( hashlib++, http://hashlib2plus.sourceforge.net/ ).
# INSTALLATION #
What about extracting the .rar-file?
# HOW IT WORKS #
Hummingbird attacks a given hash string with a so-called "bruteword" (= every possible character combination) by
encrypting it and then comparing this MD5 with the given one. When a matching bruteword is found, the application
stops the attack and creates a textfile with the results.
# ABOUT THE SOURCE CODE #
To compile the source code, you will need to download the Boost C++ Library
( http://www.boost.org/ ) and apply it correctly to the project.
# THE MD5 HASH CREATOR #
The hummingbird01.rar contains this little program as an extra feature.
You may use it for testing hummingbird or whatever.
# ADDITIONAL INFORMATION #
Hummingbird v0.1 has only been tested on a Windows XP 32-bit System. On Vista/Win7 may
possibly occur errors, I don't know. Please post a feedback here.
Due to the excessive multithreading, which makes hummingbird so fast(it checks 8 brutewords in 1 cpu step), you probably won't be able to
use high-demanding 3D applications during the brute force attack. Additionally, the less programs are running on your system
at once, the faster hummingbird works. Check the system load with your Taskmanager for further information.
The example.txt file in the .rar contains an MD5 hash that means "malo". On MY computer(core 2 duo 1,86 Ghz, 2GB RAM)
hummingbird gets it in about 30 seconds by attacking with lower case letters. I tested four other MD5 brute forcers(two of
them found on HF), until I had enough of their slowness and coded my own one. Each of these needed at
least 6 minutes for my encrypted "malo" string. And that sucked.
# DOWNLOAD #
http://www.mediafire.com/?594t6nsuc9pokw5
# VIRUS SCAN #
Spoiler (Click to View)
That's it. Have fun.
Best regards,
malo
Germany, 6-30-2011
PASSWORD RECOVERY TOOL FOR MD5 HASHS
USING BRUTE FORCE
Probably one of the fastest CPU-based MD5 hash brute forcer that you ever used!
# PICTURES #
[IMG]http://img204.imageshack.us/img204/3194/hummingbird1.jpg[/IMG]
[IMG]http://img3.imageshack.us/img3/3910/hummingbird3b.jpg[/IMG]
[IMG]http://img703.imageshack.us/img703/2554/hummingbird4.jpg[/IMG]
# CREDITS #
I could not have developed this application without the great work of Anthony Williams ( boost/thread,
http://www.boost.org/ ) and Benjamin Grüdelbach ( hashlib++, http://hashlib2plus.sourceforge.net/ ).
# INSTALLATION #
What about extracting the .rar-file?
# HOW IT WORKS #
Hummingbird attacks a given hash string with a so-called "bruteword" (= every possible character combination) by
encrypting it and then comparing this MD5 with the given one. When a matching bruteword is found, the application
stops the attack and creates a textfile with the results.
# ABOUT THE SOURCE CODE #
To compile the source code, you will need to download the Boost C++ Library
( http://www.boost.org/ ) and apply it correctly to the project.
# THE MD5 HASH CREATOR #
The hummingbird01.rar contains this little program as an extra feature.
You may use it for testing hummingbird or whatever.
# ADDITIONAL INFORMATION #
Hummingbird v0.1 has only been tested on a Windows XP 32-bit System. On Vista/Win7 may
possibly occur errors, I don't know. Please post a feedback here.
Due to the excessive multithreading, which makes hummingbird so fast(it checks 8 brutewords in 1 cpu step), you probably won't be able to
use high-demanding 3D applications during the brute force attack. Additionally, the less programs are running on your system
at once, the faster hummingbird works. Check the system load with your Taskmanager for further information.
The example.txt file in the .rar contains an MD5 hash that means "malo". On MY computer(core 2 duo 1,86 Ghz, 2GB RAM)
hummingbird gets it in about 30 seconds by attacking with lower case letters. I tested four other MD5 brute forcers(two of
them found on HF), until I had enough of their slowness and coded my own one. Each of these needed at
least 6 minutes for my encrypted "malo" string. And that sucked.
# DOWNLOAD #
http://www.mediafire.com/?594t6nsuc9pokw5
# VIRUS SCAN #
Spoiler (Click to View)
That's it. Have fun.
Best regards,
malo
Germany, 6-30-2011
* - zer0day - Jun 30, 2011
Thanks for sharing, going to check it out when I get home.
* - malo1992 - Jun 30, 2011
Virus scan:
Spoiler (Click to View)
* - ignite2030 - Jun 30, 2011
Thanks for posting this tutorial.
Ever had any success with the program? I read it should take forever to crack MD5 hash on an average computer.
* - malo1992 - Jun 30, 2011
Yeah ignite, you're right 😑 I once stole a little user:password list from a german programming forum via SQLi, but every brute force program I tried was soo fucking slow. That's why I coded my own one.
As I already mentioned in my opening post, hummingbird busts the MD5 of "malo" in 30-40 seconds, when this one,for example, takes about 7-8 minutes for the same string and with the same settings(not to make freyr's contribution bad, it's just a fact.)
Anyway, I'm starting to attack the hashs in my list tomorrow morning with hummingbird and I hope that this won't take too long 🤗
The problem is that i've got 100 % CPU utilization(says my taskmngr) during the attack, thus I can't play my games, and that's exactly what I'm going to do this evening ^^ (I live in germany, it's 5:20 pm here)
Whatever, tomorrow I'll see how good my program REALLY is. 😁
* - M8R-qvr3e1 - Jun 30, 2011
(Jun 30, 2011 07:24 AM)ignite2030 Wrote: Thanks for posting this tutorial.
Ever had any success with the program? I read it should take forever to crack MD5 hash on an average computer.
Code
http://www.lockdown.co.uk/?pg=combi* - iolaka - Jun 30, 2011
Does this support salted MD5 hashes?
* - malo1992 - Jun 30, 2011
(Jun 30, 2011 08:46 AM)iolaka Wrote: Does this support salted MD5 hashes?No, not yet. Maybe I'll add this later on, just like some SHA1 and SHA256-SHA512 functions. We'll see...
Anyway, it's open source, so if you don't want to wait -> upgrade it!
* - cicaglisa - Feb 11, 2013
Download link is dead... Anyone has source code laying around somewhere?
* - PedroDJ - Feb 11, 2013
(Feb 11, 2013 01:05 AM)cicaglisa Wrote: Download link is dead... Anyone has source code laying around somewhere?
Thread little bit outdated: 06-30-2011, 04:29 PM (This post was last modified: 06-30-2011 08:22 PM by malo1992.)
* - cicaglisa - Feb 11, 2013
Yeah I know, but I haven't found any other multi threaded brute forcing tool source code that would fit my needs besides this one, so I gave it a shot... :/ Hopefully someone will have it..
* - NewMen2 - Feb 11, 2013
Thanks for sharing, going to check it out when I get home.
* - Mayzer™ - Feb 11, 2013
Hi, Looks like mediafire took it down would you mind sending me a copy or re-upp'n?
Cheers :)
* - malo1992 - Apr 13, 2015
Damn, all that stuff happend 4 years ago! Time flies by....
Anyway, due to some requests I reupped the whole thing. Hoping those who were interested are still alive.
NEW DOWNLOAD LINK (source code + binary)
http://www.mediafire.com/download/ap5zt9eol9jztw5/Hummingbird01.rar
CAUTION! I don't know why the f*ck Icarus detects anything. Nor do I care - probably not being able to change it anyway. Accordingly, everything happens on your own risk.
https://www.virustotal.com/de/file/716c49de15a2dbadbb8e8a05d205c425d7dc051d37ac4a47e1ebc889088e76a4/analysis/1428929943/
Spoiler (Click to View)
Happy cracking.
Cheers