kali工具箱

RainbowCrack Package Description

RainbowCrack is a general propose implementation of Philippe Oechslin’s faster time-memory trade-off technique. It crack hashes with rainbow tables.

RainbowCrack uses time-memory tradeoff algorithm to crack hashes. It differs from brute force hash crackers.

A brute force hash cracker generate all possible plaintexts and compute the corresponding hashes on the fly, then compare the hashes with the hash to be cracked. Once a match is found, the plaintext is found. If all possible plaintexts are tested and no match is found, the plaintext is not found. With this type of hash cracking, all intermediate computation results are discarded.

A time-memory tradeoff hash cracker need a pre-computation stage, at the time all plaintext/hash pairs within the selected hash algorithm, charset, plaintext length are computed and results are stored in files called rainbow table. It is time consuming to do this kind of computation. But once the one time pre-computation is finished, hashes stored in the table can be cracked with much better performance than a brute force cracker.

Source: http://project-rainbowcrack.com/index.htm
RainbowCrack Homepage | Kali RainbowCrack Repo

Author: RainbowCrack Project
License: Free

tools included in the rainbowcrack package

rcrack – Rainbow table password cracker

[email protected]:~# rcrack

RainbowCrack 1.5

Copyright 2003-2010 RainbowCrack Project. All rights reserved.

Official Website: http://project-rainbowcrack.com/



usage: rcrack rt_files [rt_files ...] -h hash

       rcrack rt_files [rt_files ...] -l hash_list_file

       rcrack rt_files [rt_files ...] -f pwdump_file

       rcrack rt_files [rt_files ...] -n pwdump_file

rt_files:               path to the rainbow table(s), wildchar(*, ?) supported

-h hash:                load single hash

-l hash_list_file:      load hashes from a file, each hash in a line

-f pwdump_file:         load lanmanager hashes from pwdump file

-n pwdump_file:         load ntlm hashes from pwdump file



hash algorithms implemented in alglib0.so:

    lm, plaintext_len limit: 0 - 7

    ntlm, plaintext_len limit: 0 - 15

    md5, plaintext_len limit: 0 - 15

    sha1, plaintext_len limit: 0 - 20

    mysqlsha1, plaintext_len limit: 0 - 20

    halflmchall, plaintext_len limit: 0 - 7

    ntlmchall, plaintext_len limit: 0 - 15

    oracle-SYSTEM, plaintext_len limit: 0 - 10

    md5-half, plaintext_len limit: 0 - 15



example: rcrack *.rt -h 5d41402abc4b2a76b9719d911017c592

         rcrack *.rt -l hash.txt

rt2rtc – Convert rainbow tables from .rt to .rtc

[email protected]:~# rt2rtc

RainbowCrack 1.5

Copyright 2003-2010 RainbowCrack Project. All rights reserved.

Official Website: http://project-rainbowcrack.com/



usage: rt2rtc rt_files [rt_files ...] start_point_bits end_point_bits [-m chunk_size_in_mb] [-p]



Input rainbow tables must be sorted.

1 <= start_point_bits <= 64

1 <= end_point_bits   <= 64

1 <= chunk_size_in_mb

rtc2rt – Convert rainbow tables from .rtc to .rt

[email protected]:~# rtc2rt

RainbowCrack 1.5

Copyright 2003-2010 RainbowCrack Project. All rights reserved.

Official Website: http://project-rainbowcrack.com/



usage: rtc2rt rtc_files [rtc_files ...]

rtgen – Generate rainbow tables

[email protected]:~# rtgen

RainbowCrack 1.5

Copyright 2003-2010 RainbowCrack Project. All rights reserved.

Official Website: http://project-rainbowcrack.com/



usage: rtgen hash_algorithm charset plaintext_len_min plaintext_len_max table_index chain_len chain_num part_index

       rtgen hash_algorithm charset plaintext_len_min plaintext_len_max table_index -bench



hash algorithms implemented in alglib0.so:

    lm, plaintext_len limit: 0 - 7

    ntlm, plaintext_len limit: 0 - 15

    md5, plaintext_len limit: 0 - 15

    sha1, plaintext_len limit: 0 - 20

    mysqlsha1, plaintext_len limit: 0 - 20

    halflmchall, plaintext_len limit: 0 - 7

    ntlmchall, plaintext_len limit: 0 - 15

    oracle-SYSTEM, plaintext_len limit: 0 - 10

    md5-half, plaintext_len limit: 0 - 15



example: rtgen md5 loweralpha 1 7 0 1000 1000 0

         rtgen md5 loweralpha 1 7 0 -bench