Ophcrack Plugin? Options

[Melted_CPU]

Is there a plugin for Ophcrack?
http://sourceforge.net/projects/ophcrack

[pcuser]

I downloaded the live cd iso at work a while back intending to make a multiboot plugin but never got around to doing it. I'm downloading the iso here at home right now and I'll see what I can do with it.

[hilander999]

I downloaded the live cd iso at work a while back intending to make a multiboot plugin but never got around to doing it. I'm downloading the iso here at home right now and I'll see what I can do with it.

That looks like a pretty large iso for a program thats less then 4mb.



Is this a mod of the original LophtCrack program?? I have an old plugin for that one, maybe there is a way to make a plugin instead of a boot entry for the iso file.

[pcuser]

The installer is only 4mb but that doesn't include the tables. The live cd includes the SSTIC04-10k set which is 388mb. The NTHASH table is 8.5gb so it's not the size of the installer that matters.

[hilander999]

The installer is only 4mb but that doesn't include the tables. The live cd includes the SSTIC04-10k set which is 388mb. The NTHASH table is 8.5gb so it's not the size of the installer that matters.

Now it makes more sense. Have not even looked at it yet, but I like the idea & it will still fit on a dvd so that would be a cool addition if it will work.

[bengt]

I made both a multiboot and an ordinary plugin a while ago.

The multiboot plugin works fine but is only tested without the addition of other multiboot plugins
I copied ALL files (I always do that when testing/adding something new) to root of the cd with the exception of its
autorun.inf and booted with :
ophcrack_bcdw.ini
boot\isolinux.bin ; ophcrack ; ^ ophcrack ;

With the "ordinary" plugin, (stemming from the ophcrack-win32-installer-2.3.exe) no matter what method i use to start it, after selecting SAM and SYSTEM and then running it, I get this error:
Error: no valid hash was found in this file.

The tables are copied to a separate programs folder.
It starts fine from the cd using only the .exe to start it.
I have also tried to load the program into RAM (the tables are not loaded to RAM) and using Runscanner
Here are some of my feeble attempts:

I tried using a start.cmd:

@echo off
rem -------------------------------------------------------------------------
rem ophcrack.cmd - Script to start ophcrack.exe from UBCD4Win
rem semi-created by Bengt
rem -------------------------------------------------------------------------
echo ophcrack.CMD: Starting...
setlocal

if "%temp%" == "" goto _err
if exist "%temp%\ophcrack\win32\ophcrack.exe\" goto _run
mkdir %temp%\ophcrack

xcopy /s "%~dp0*.*" "%temp%\ophcrack" /y

:_run
chdir /D %temp%
start %SystemDrive%\Programs\RunScanner\RunScanner.exe /t 5000 %temp%\ophcrack\win32\ophcrack.exe
goto _end

:_err
echo.
echo ophcrack.CMD: No temp variable set...
echo ophcrack.CMD: Try adding a ramdrive...
echo.
pause.

:_end
endlocal

I have also tried to register the included dll:s in the above .cmd:

start /wait regsvr32 /s %temp%\ophcrack\win32_tools\LsaExt.dll
start /wait regsvr32 /s %temp%\ophcrack\win32_tools\samdump.dll
and so on with the other dll:s....

--------------------------------------------------------------------
; ophcrack.inf
; PE Builder v3 plug-in INF file for ophcrack
; Created by Bengt

[Version]
Signature= "$Windows NT$"

[PEBuilder]
Name="Password: ophcrack"
Enable=1

[WinntDirectories]
a="Programs\ophcrack",2
b="Programs\ophcracktables\5000",2
c="Programs\ophcracktables\10000",2

[SourceDisksFolders]
files=a,,1
5000=b,,1
10000=c,,1

[SourceDisksFiles]
startophcrack.cmd=a,,1

[Append]
nu2menu.xml, ophcrack_nu2menu.xml
--------------------------------------------------------------------

<!-- Nu2Menu entry for ophcrack -->
<NU2MENU>
<MENU ID="Programs">
<MITEM TYPE="POPUP" MENUID="Password Tools">Password Tools</MITEM>
</MENU>

<MENU ID="Password Tools">

<MITEM TYPE="ITEM" DISABLED="@Not(@FileExists(@GetProgramDrive()\Programs\ophcrack\startophcrack.cmd))" CMD="RUN"

FUNC="

@GetProgramDrive()\PROGRAMS\ophcrack\startophcrack.cmd">ophcrack</MITEM>

</MENU>
</NU2MENU>

--------------------------------------------------------------------
; ophcrack.inf for !multiboot
; Created by bengt

[Version]
Signature= "$Windows NT$"

[PEBuilder]
Name="!Multiboot: ophcrack"
Enable=1


[SourceDisksFolders]
files=30000
;except the autorun.inf which is removed

[Append]
BCDW\BCDW.INI,ophcrack_bcdw.ini



All suggestions are welcome

This post has been edited by bengt: Oct 15 2006, 01:10 PM

[nick²]

whats the benefit of this as opposed to something like SAMINSIDE or LC5?

[bengt]

The ophcrack live cd is a fully automated Windows password cracker/ security tester.
http://ophcrack.sourceforge.net/https://www.ubcd4win.com/l

ophcrack is faster, much faster as it does not depend on a list of possible passwords to brute force, rather it uses hash tables
http://blog.tech-security.com/?p=15

This post has been edited by bengt: Jan 1 2007, 04:53 PM

[The Piney]

Looks like a new version is out..

Ophcrack 2.3.4

The live-CD should be updated as well..

http://sourceforge.net/forum/forum.php?forum_id=666452

[herges]

Has anyone had any success getting the latest version of Ophcrack Live CD 1.2.2 working?

[pcuser]

Has anyone had any success getting the latest version of Ophcrack Live CD 1.2.2 working?

I haven't tried with 1.2.2 but a plugin for ophcrack (currently at 1.1.4) can be found HERE

[The Piney]

They just released a new version - ophcrack-xp-livecd-2.0.iso

http://ophcrack.sourceforge.net/

[herges]

I've managed to get a plugin for OphCrack Live CD 2.0 working. How can I upload it to this forum?

[lovetoflyguy]

I've managed to get a plugin for OphCrack Live CD 2.0 working. How can I upload it to this forum?

Is there any chance you would share your secret? Or possibly email me your version of the plugin? I've been trying to get it working too, but I keep getting "kernel panic" errors when I try to boot into it using the multiboot option.

error: "kernel panic - not syncing: no init found. try passing init= option to kernel'

I've found that the 2.0 iso doesn't have the same file structure as the .ini files here. I've tried to match them up in various ways, but no joy...

My .ini files:

CODE

Ophcrack.ini

; Created by pcuser

[Version]
Signature= "$Windows NT$"

[PEBuilder]
Name="!Multiboot: Ophcrack Live CD v1.1.4 Win XP <Press CONFIG>"
Enable=1
config=CONFIG_Ophcrack.cmd

[WinntDirectories]
a="boot",2
b="BCDW",2
c="base",3
d="devel",3
e="modules",3
f="ophcrack",3
g="optional",3
h="rootcopy",3
i="slax",3
j="tools",3

[SourceDisksFolders]
files\base=c,,1
files\devel=d,,1
files\modules=e,,1
files\ophcrack=f,,1
files\optional=g,,1
files\rootcopy=h,,1
files\rootcopy=i,,1
files\tools=j,,1

[SourceDisksFiles]
files\boot\initrd.gz=a,ophcrack.gz,1
files\boot\vmlinuz=a,ophcrack,1
files\boot\isolinux.bin=a,,1
files\livecd.sgn=30000,,1

[Append]
BCDW\BCDW.INI,Ophcrack_bcdw.ini

---------------------------------------------------------------------------------
Ophcrack_bcdw.ini

/boot/isolinux.bin ;
Ophcrack Live CD v1.1.4 Win XP ;
type "./launch.sh" from the command line after you login to start Ophcrack ;
/boot/ophcrack append max_loop=255 initrd=/boot/ophcrack.gz init=linuxrc
load_ramdisk=1 prompt_ramdisk=0 ramdisk_size=4444 root=/dev/ram0 rw