Cracking
Cracking
WARNING: some if not all executables availables here will get flagged positive by antivirus software. You've been warned !
To use them correctly, you will have to add exclusions to your security software(s).
Recover your Mozilla passwords
If you have lost your Master Password for Firefox or Thunderbird, here is a method to help you recover it.
This is a method using a password file, so you have to have a clue about the form of the password.
For the sake of clarity, paths have been omitted. It's up to you to handle this thing.
- Get johntheripper, the jumbo and the bleeding-jumbo versions
- Get the
key3.db file from your Firefox/Thunderbird profile, and copy it somewhere.
- Run
mozilla2john.exe key3.db > moz_key.txt from the bleeding-jumbo tree. This is to extract the hash in a format that john understands.
- Get the path of your password list file (here
.tmp.lst).
- Run
john moz_key.txt --wordlist=.tmp.lst
- If john succeeds, use
john moz_key.txt -show to show the password.
I have compiled a zip file containing both jtr versions, a bat file to nicely execute all actions above (except for source file copying), and a php file to generate passwords from known patterns combinations (optional).
There is also a sample key3.db and a password list file. The Master Password of the key3.db file is "12345678".
Running the batch file with the password file provided will not even take a second.
Downloads : for x64 - for x32
Notes
A password file is a file that contains a list of passwords, one per line. You can put your usual passwords in it. john will try all the passwords against the key.
Useful when you know the password has some form/pattern, but you dont know in which order and what strings exactly.
To generate such password list from know patterns, you can use my php script contained in the zit-moz-crack package. The file is independant of everything else, you just need a local webserver.
If you want to crack a random password, you can also download some huge password files on the web, or learn how to use John to tweak the generation patterns. But that's another story.
Creating a password file
Download my script here. This script can only be accessed from localhost (127.0.0.1).
Usage: put that at the root of your localhost webserver, and navigate to the page.
NEVER put that script on a public server ! There's no security AT ALL. It's a #localhost_tool.
Password for the 7z files
All archives (in 7zip format) are password-protected.
This is to be sure that you have understood the warning on the top of page !
Archives code:
P5+6q7£&j2$z4L%3R
Navbar :: rabbit.lu / it /
$cracking.php
Last update: 14 June 2021 04:18:47
Hosting by OVH