PHP MD5-SHA1 Cracker

noize · 04-04-2013, 02:18 PM

MD5 Cracker:

PHP Code:
<html>
<head>

<div align="center" style="position: absolute; top: 37px; left: 7px; width: 187px; color: red; font-family: helvetica; font-size: 14px;">
Coded by Noize at<br>
HackCommunity.com<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
MD5 Hash Cracker
</div>

<link rel="stylesheet" type="text/css" href="http://noizethehacker.altervista.org/style.css" />
<title>MD5 Hash Cracker</title>
<script type="text/javascript">
window.onload = function() {
    document.getElementById('hash').focus();
}
</script>
</head>

<body bgcolor="black">
<div id="center_body">
<font color="#00ff00">

#########################################################<br>
<font face="sans-serif" size="4" color="white"><b>Noize's MD5 Hash Cracker</b></font><br>
#########################################################<br>

<form method='post' action='' style="position: relative; left: 6px;">
<br>
Hash:&nbsp;&nbsp;&nbsp;&nbsp; <input type="text" name="hash" id="hash" placeholder="MD5 Hash" /><br>
Wordlist: <input type="text" name="wordlist" id="wordlist" style="position: relative; left: -1px;" placeholder="wordlist.txt" value="wordlist.txt" /><br>
<input type="submit" value="&nbsp;&nbsp;&nbsp;&nbsp;Crack&nbsp;&nbsp;&nbsp;&nbsp;" style="position: relative; top: 3px; left: 95px; margin-bottom: -5px; color: #00ff00; background-color: black; font-family: arial; font-size: 13px; cursor: pointer;" /><br>
<input type="hidden" name="submit" />
</form>
#########################################################<br>

</font>

<a href="sha1cracker.php">
<font color="black">
<input type="button" class="switch_hash" value="SHA1">
</font>
</a>

<br>

<?php

if (isset($_POST['submit'])) {
    $wordlist = htmlentities($_POST['wordlist']);

    if(!file_exists( $wordlist ))
    {
        echo '<font color="red">Wordlist not found at location ' . $wordlist . '.</font>';
        exit();
    }

    $hash = trim($_POST['hash']);
    $wordlist = file($_POST['wordlist']);
    $bFound = false;

    foreach( $wordlist as $line ) {
        $line = trim($line);
        if(md5($line)==$hash) {
            $bFound = true;            
            echo 'Hash cracked!<br>The root of the hash is ' . htmlentities($line) . '.';
            break;
        }
    }
    if(!$bFound){
        echo"Failed to crack the hash.";
    }
}

?>

</div>

<div align="center" style="position: relative; bottom: -352px; left: -35px; font-family: verdana; color: #666; font-size: 12px;">
&copy; Special thanks go to 
    <a href="http://www.hackcommunity.com/User-zomgwtfbbq" style="
    font-size: 12px;
    font-family: verdana;
    color: blue;"
    target="_blank">
zomgwtfbbq</a> &#183 
    <a href="http://www.hackcommunity.com/User-1llusion" style="
    font-size: 12px;
    font-family: verdana;
    color: blue;"
    target="_blank">
1llusion</a> &#183 
All rights are shit
</div>

</body>
</html> 

You can view the cracker (MD5/SHA1) here.
On that server you can find a wordlist at the path tools/wordlist.txt.
Convert text in MD5 hash here: http://tools.perceptus.ca/text-wiz.php?ops=9, if you want to test it and give feedback/report bugs, I'll appreciate it.

Original post:

PHP Code:
if (isset($_POST['submit'])) {
    $hash = $_POST['hash'];
    $wordlist = $_POST['wordlist'];
    foreach( $wordlist as $line ) {
        if(md5($wordlist['line']) == $hash ) {
            echo 'Hash cracked!<br>The root of the hash is ' . $wordlist[$line] . '.';
            exit();
        } else {
            echo 'Failed to crack the hash.';
            exit();
        }
    }

    if(!file_exists( $wordlist ))
    {
        echo '<font color="red">Wordlist not found at location ' . $wordlist . '.</font>';
    }
} 

This should take the wordlist (chosen by the user), and look if any line hashed with MD5 is equal to the given hash.
This just doesn't work.
I'm not a great PHP coder, so I'd like to know if anybody may give me any suggestion.
Thanks.

I've just added SHA1 cracking too, I'm not publishing code as it's just the same but with SHA1 replacing MD5.
Code for button (if any wants to view it) is available as HTML/CSS.

PHP MD5-SHA1 Cracker
Author Message