[Mr. Robot]

So an idea I had based on a thread I just posted for the tools section of HF.

Obviously you don't want people entering their passwords but what about a tool that tells people how long it would take to crack their password if the website was hosting it in MD5 or SHA1.

The way masks are used:
Hackforums2020 = ?u?l?l?l?l?l?l?l?l?l?d?d?d?d
Hackforums!2020 = ?u?l?l?l?l?l?l?l?l?l?s?d?d?d?d

Code

?l = abcdefghijklmnopqrstuvwxyz
?u = ABCDEFGHIJKLMNOPQRSTUVWXYZ
?d = 0123456789
?s = «space»!"#$%&'()*+,-./:;<=>?@[\]^_`{|}~
?a = ?l?u?d?s

So people could put their password in as a mask and it will tell them how long it would take on average.

Example:
I put in
?d?d?d?d?d?d?d?d?d?d (with my password being 1234567890)
MD5= e807f1fcf82d132f9bb018ca6738a19f
SHA1= 01b307acba4f54f55aafc33bb06bbbf6ca803e9a
Which would take like 2-3 seconds to crack.

[realsunjester]

to calculate the time it takes to crack (or collide) hashes depends on the computing power and the software algorithm being used to brute or collide the hash. also take into account the size of the wordlist being used if not brute forcing.

[VIXV]

So an idea I had based on a thread I just posted for the tools section of HF.

Obviously you don't want people entering their passwords but what about a tool that tells people how long it would take to crack their password if the website was hosting it in MD5 or SHA1.

The way masks are used:
Hackforums2020 = ?u?l?l?l?l?l?l?l?l?l?d?d?d?d
Hackforums!2020 = ?u?l?l?l?l?l?l?l?l?l?s?d?d?d?d

Code

?l = abcdefghijklmnopqrstuvwxyz
?u = ABCDEFGHIJKLMNOPQRSTUVWXYZ
?d = 0123456789
?s = «space»!"#$%&'()*+,-./:;<=>?@[\]^_`{|}~
?a = ?l?u?d?s

So people could put their password in as a mask and it will tell them how long it would take on average.

Example:
I put in
?d?d?d?d?d?d?d?d?d?d (with my password being 1234567890)
MD5= e807f1fcf82d132f9bb018ca6738a19f
SHA1= 01b307acba4f54f55aafc33bb06bbbf6ca803e9a
Which would take like 2-3 seconds to crack.

I like the idea of this, they could calculate the power easily of say different specs of power. (Skid's laptop) to (Quantum Computer), could be funny but informative.

[Mr. Robot]

to calculate the time it takes to crack (or collide) hashes depends on the computing power and the software algorithm being used to brute or collide the hash. also take into account the size of the wordlist being used if not brute forcing.

Absolutely, I would focus mainly on a single 1060 or 1080 as the cracking rig and run it on masks not wordlists.

It definitely could go more in depth but that depends on how much effort you want to put in.

[ETH]

So an idea I had based on a thread I just posted for the tools section of HF.

Obviously you don't want people entering their passwords but what about a tool that tells people how long it would take to crack their password if the website was hosting it in MD5 or SHA1.

The way masks are used:
Hackforums2020 = ?u?l?l?l?l?l?l?l?l?l?d?d?d?d
Hackforums!2020 = ?u?l?l?l?l?l?l?l?l?l?s?d?d?d?d

Code

?l = abcdefghijklmnopqrstuvwxyz
?u = ABCDEFGHIJKLMNOPQRSTUVWXYZ
?d = 0123456789
?s = «space»!"#$%&'()*+,-./:;<=>?@[\]^_`{|}~
?a = ?l?u?d?s

So people could put their password in as a mask and it will tell them how long it would take on average.

Example:
I put in
?d?d?d?d?d?d?d?d?d?d (with my password being 1234567890)
MD5= e807f1fcf82d132f9bb018ca6738a19f
SHA1= 01b307acba4f54f55aafc33bb06bbbf6ca803e9a
Which would take like 2-3 seconds to crack.

Surely But argon2 does more to get the more difficult way to get the password