Distributed WPA/WPA2 Cracking

|

In another post regarding the raw power of Nvidia’s graphics chips for password cracking, Russian software developer Elcomsoft has developed software that uses CUDA to break WPA and WPA2 encryption.

Press release here.

Obfuscated TCP

|

An interesting project that someone is working on is how to make encryption cheap enough and easy enough to use in a more widespread scenario. If you’ve read earlier regarding my SNI support, you would see that I’m a big fan of this goal.

I haven’t worked out the specific details but might try configuring this for the Maryland2600.org domain to see how it works.

More info here, if you’re interested.

Password Cracking & CUDA

|

Further reducing my faith in any password-based authentication mechanisms, comes along a password cracking program that uses CUDA and Nvidia graphics cards to crack password hashes.

The Extreme GPU Bruteforcer currently has support for cracking NTLM, SHA-1, MD5, and various derivatives of MD5 and salting mechanisms.

In simple tests that I ran on a dummy password of “ako123″ hashed with MD5, the CUDA-based cracker was able to find it in less than 30 seconds. It took a bit longer, but it was able to find it within the 3 minute demo timelimit of the application hashed as SHA-1 as well.

The CPU password cracker the company puts out is not multi-threaded, so you can double or quadruple the CPU performance numbers to get an estimate on how well the test would do if it were threaded across all of your available cores.

Performance Figures:

8600GTS 256MB PCI-E graphics card
Intel Core 2 Duo E6550 2.33Ghz

GPU MD5/A-Za-z0-9/3-8 characters: 80M passwords/second
CPU MD5/A-Za-z0-9/3-8 characters: 5.3M passwords/second
GPU SHA1/A-Za-z0-9/3-8 characters: 16.5M passwords/second
CPU SHA1/A-Za-z0-9/3-8 characters:2.7M passwords/second

Download here. Note Vendor website is down at the moment.

Two Lanparties Upcoming!

|

Figured I would make a refresher post for those that are interested.

On October 25th, there’s a lanparty going on in Hyattsville, MD. For more information, head over to irixbox.com

On November 14th, the Maryland Lan Gamers are hosting a LAN in Greenbelt, MD. For more information on that LAN Party, head over to Maryland LAN Gamers.

Friday’s topics of discussion

|

If some people show up I would like to discuss a few things. Everyone is welcome to discuss any topic they want, and all comments and criticisms are welcome. But I’ve been playing around with a few things recently and wanted to start an open discussion on them.

  • Apache with SNI Support
  • Key-based SSH Authentication as opposed to password-based
  • SSH as Root?!

Upcoming meeting!

|

There is a meeting coming up on October 3rd, 2008. Some of us don’t get there until a little bit later so if nobody shows up at 5PM stick around.

Google Chrome

|

Google recently released a new web browser. Under preliminary tests, it seems to be the fastest browser available especially when it comes to javascript performance–besting Firefox 3’s performance on the Sunspider Javascript benchmark.

Unfortunately at this time, the browser is only available for Windows. There doesn’t appear to be any java support either.

Download Source

Upcoming LAN Party

|

Hey all,

I know everyone is used to someone hosting a LAN at their house, but this might be a better way to get to a LAN that actually feels like a LAN. The Maryland LAN Gamers have an upcoming event in Greenbelt, MD on November 14th.

The only unfortunate aspect to this is that they charge money for the event, and it’s not cheap. If you’re interested, go ahead and respond.

Paypal: $30
Door: $35

http://www.marylandlangamers.net/

Upcoming Meeting

|

There is an upcoming meeting on September 5th, 2008. Bring anything cool that you would like to show off!

Welcome

|

Welcome to the new home of the Maryland 2600 group. Pardon the dust as I get everything setup!