Exemple #1
0
//All requests made to the HTTP server are processed by this function
func httpRequestHandler(w http.ResponseWriter, r *http.Request) {

	err := r.ParseForm()
	if err != nil {
		fmt.Fprintf(w, "%s", err.Error())
	}

	//Prints webpage
	fmt.Fprintf(w, "<html><form action=\"\" method=\"post\"><input type=\"text\" name=\"hash\"><input type=\"submit\"></form></html>")

	//Retrive value from form of hash
	strHash := r.Form.Get("hash")

	//If hash exist
	if len(strHash) == 0 {
		return
	}

	worder, err := wordlist.New(os.Getenv("GOPATH") + "/src/github.com/karlek/gohash/a.txt")
	if err != nil {
		fmt.Println("New: ", err)
	}

	hash, err := str2hash.New(strHash)
	if err != nil {
		fmt.Println(err)
	}

	c := make(chan string)

	go worder.Check(hash, c)
	fmt.Println(<-c)
}
Exemple #2
0
func find(hash *str2hash.Hash) {

	/** Google attack
	* There's a high chance that the hash has already been cracked so we use google to find them!
	**/

	t0 := time.Now()

	// results, err := google.Google(hash.Hash)
	// if err != nil {
	// 	log.Fatalln("attack.Google:", err)
	// }

	t1 := time.Now()

	// fmt.Printf("\n%d results on google\n", results)
	fmt.Printf("Googled hash in %v.\n", t1.Sub(t0))

	/** Wordlist attack
	 * Most people don't use random characters as their passwords, they use common words.
	 * By hashing and comparing the words in the list, we can find the word if the hash is identical.
	 **/

	t0 = time.Now()

	//Make wordlist from file
	worder, err := wordlist.New(path)
	if err != nil {
		log.Fatalln("attack.New:", err)
	}

	//Set mutate functions, these will affect the wordlist.Mutate() method
	worder.MutateFuncs = []func(string) string{
		strings.Title,
		strings.ToUpper,
		strings.ToLower,
		mutation.Leet,
	}

	//Add all mutations of the words to the wordlist and keeping the original
	if mutate {
		go worder.Mutate()
	}

	//Salt wordlist, in this case nothing happens since both strings are empty
	worder.Salt("", "")

	c := make(chan string)

	///This comment might be wrong, but this is how I understood go channels
	//The check functions runs through it's wordlist and searches for the correct string. If it fails it waits for the other goroutines. By using return, the goroutine which succeeds prematurely finishes the channel and prints the found string.
	//I know now that it doesn't prematurely finish the channel, but it somehow chooses the goroutine which returns.
	go worder.Check(hash, c)

	fmt.Println(<-c)

	t1 = time.Now()

	fmt.Printf("Hash lookup in %v.\n", t1.Sub(t0))
}